huahuibao/app/client/controllers/AuthController.php

<?php

namespace client\controllers;

use biz\merchant\services\MerchantService;
use biz\user\classes\UserClass;
use biz\user\services\UserService;
use common\components\httpUtil;
use common\components\jwt;
use common\components\stringUtil;
use Yii;
use common\components\util;
use common\services\xhMerchantService;
use common\components\weixinUtil;

use Lcobucci\JWT\Builder;
use Lcobucci\JWT\Signer\Hmac\Sha256;
use Lcobucci\JWT\Parser;
use Lcobucci\JWT\ValidationData;
use linslin\yii2\curl;
use yii\helpers\Json;

/**
 * 微信 oauth 授权相关
 *
 */
class AuthController extends PublicController
{
	
	//准备授权 shish 2019.11.19
	public function actionPrepare()
	{
		$get = Yii::$app->request->get();
		$url = isset($get['url']) && !empty($get['url']) ? $get['url'] : '';
		if (empty($url)) {
			util::fail('没有网址');
		}
		$account = httpUtil::getAccount($url);
		if (empty($account)) {
			util::fail('没有商家帐号');
		}
		$merchant = MerchantService::getById($account);
		if (empty($merchant)) {
			util::fail('商家无效');
		}
		/**
		 * authScope 参数的说明
		 * 1.用户通过公众号菜单打开网页，因为已经关注过了公众号，已经生成过用户信息，所以只要使用snsapi_base静默方式拿到openid就可以
		 * 2.为了保证付款页的访问速度，暂时只要通过snsapi_base静默方式拿到openid先生成可以用的用户信息即可
		 * 3.其它情况需要获取用户完整信息的，使用snsapi_userinfo让用户授权获取信息即可
		 * 4.snsapi_base静默方式使用的场景更多，所以参数authScope默认使用snsapi_base
		 */
		$authScope = isset($get['authScope']) ? $get['authScope'] : 'snsapi_base';
		$urlEncode = stringUtil::urlSafeB64Encode($url);
		//微信授权获取code shish 2019.11.24
		weixinUtil::getCode($urlEncode, $merchant, $authScope);
		util::end();
	}
	
	//微信授权获取用户信息 shish 2019.11.20
	public function actionGetUserInfo()
	{
		$get = Yii::$app->request->get();
		$code = isset($get['code']) ? $get['code'] : '';
		if (empty($code)) {
			util::fail('没有获取用户code');
		}
		if (isset($get['state']) && $get['state'] == 'authdeny') {
			util::fail('auth fail');
		}
		$urlEncode = $get['url'];
		$url = stringUtil::urlSafeBase64Decode($urlEncode);
		$account = httpUtil::getAccount($url);
		if (empty($account)) {
			util::stop('商店ID无效！');
		}
		$merchant = xhMerchantService::getByAccount($account);
		if (empty($merchant)) {
			util::stop('商店无效');
		}
		$merchantId = $merchant['id'];
		$authScope = isset($get['authScope']) ? $get['authScope'] : '';
		if (empty($authScope)) {
			util::stop('没有授权类型');
		}
		$data = weixinUtil::getOpenId($code, $merchant);
		if ($data === false) {
			//微信授权获取code shish 2019.11.24
			weixinUtil::getCode($urlEncode, $merchant, $authScope);
			util::end();
		}
		$openId = $data['openid'];
		$access_token = $data['access_token'];
		$user = UserService::getByOpenId($openId, $merchantId);
		//用户来源
		$userSource = Yii::$app->dict->getValue('userSourceGetId', 'official');
		$source = $userSource['name'];
		if (empty($user)) {
			//$authScope 默认是 snsapi_base 公众号菜单打开网页(已经关注公众号，有完整信息)、打开付款页(有些客户只付款，没有后续可以不用登记完整信息)，只需要获取openid
			$originalInfo = [];
			$originalInfo['openId'] = $openId;
			$originalInfo['merchantId'] = $merchantId;
			
			//没有关注公众号，需要获取用户完整信息的情况，则通过弹框授权
			if ($authScope == 'snsapi_userinfo') {
				$baseInfo = weixinUtil::authGetUserInfo($openId, $access_token);
				$originalInfo = array_merge($baseInfo, $originalInfo);
				$originalInfo['isFull'] = 1;
				$originalInfo['unionId'] = $baseInfo['unionid'];
				$originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
				$originalInfo['nickName'] = $baseInfo['nickname'];
			}
			$user = UserService::replaceUser($originalInfo, $source, $merchantId);
		} else {
			if ($user['isFull'] == 0) {
				if ($authScope == 'snsapi_userinfo') {
					$baseInfo = weixinUtil::authGetUserInfo($openId, $access_token);
					$originalInfo = $baseInfo;
					$originalInfo['isFull'] = 1;
					$originalInfo['unionId'] = $baseInfo['unionid'];
					$originalInfo['headImgUrl'] = $baseInfo['headimgurl'];
					$originalInfo['openId'] = $baseInfo['openid'];
					$originalInfo['nickName'] = $baseInfo['nickname'];
					$originalInfo['merchantId'] = $merchantId;
					$user = UserService::replaceUser($originalInfo, $source, $merchantId);
				}
			}
		}
		//这个的基类没有设置统一的全局变量，这里进行设置一次
		$userId = $user['id'];
		//获取token
		$token = jwt::getNewToken($userId);
		$url = strpos($url, '?') === false ? $url . '?token=' . $token : $url . '&token=' . $token;
		$this->redirect($url);
	}
	
	//静默获取小程序用户信息
	public function actionMiniInfo()
	{
		$code = Yii::$app->request->get('code', '');
		if (empty($code)) {
			util::fail('没有CODE信息');
		}
		$merchant = $this->merchant;
		$account = $this->merchantId;
		$appId = $merchant['miniAppId'];
		$appSecret = $merchant['miniAppSecret'];
		$url = "https://api.weixin.qq.com/sns/jscode2session?appid={$appId}&secret={$appSecret}&js_code={$code}&grant_type=authorization_code";

		$curl = new curl\Curl();
		$result = $curl->get($url);
		$arr = Json::decode($result);
		$sessionKey = isset($arr['session_key']) ? $arr['session_key'] : '';
		$openid = isset($arr['openid']) ? $arr['openid'] : '';
		//用户来源
		$userSource = UserClass::$userSourceId['mini']['name'];
		$user = UserService::getByMiniOpenId($openid, $account);
		if (empty($user)) {
			$userInfo = ['miniOpenId' => $openid, 'merchantId' => $account];
			$user = UserService::replaceUser($userInfo, $userSource, $account);
		}
		$cacheKey = 'MINI_SESSION_KEY_' . $openid;
		Yii::$app->redis->executeCommand('SET', [$cacheKey, $sessionKey]);
		$userId = $user['id'];
		$token = jwt::getNewToken($userId);
		util::success(['token' => $token, 'user' => $user]);
	}

}