update

api/wx/login.go

@@ -0,0 +1,160 @@
+package wx
+
+import (
+	"OneAuth/cfg"
+	"OneAuth/libs/tools"
+	"OneAuth/models"
+	"errors"
+	"fmt"
+	"github.com/veypi/OneBD"
+	"github.com/veypi/OneBD/rfc"
+	"github.com/veypi/utils"
+	"github.com/veypi/utils/log"
+	"net/url"
+	"strings"
+	"time"
+)
+
+var tokens = map[uint]string{
+	1: "",
+}
+
+func login(m OneBD.Meta) {
+	var loc = ""
+	defer func() {
+		m.Header().Set("Location", loc)
+		log.Warn().Msg(loc)
+		m.WriteHeader(rfc.StatusPermanentRedirect)
+	}()
+	app := &models.App{
+		UUID: m.Params("id"),
+	}
+	err := cfg.DB().Preload("Wx").Where(app).First(app).Error
+	loc = fmt.Sprintf("/#/wx?uuid=%s&msg=", app.UUID)
+	if err != nil {
+		loc += err.Error()
+		return
+	}
+	if app.Wx == nil {
+		loc += "微信登录未绑定"
+		return
+	}
+	if tokens[app.Wx.ID] == "" {
+		tokens[app.Wx.ID], err = requestCorpToken(app.Wx.CorpID, app.Wx.CorpSecret)
+		if err != nil {
+			log.Warn().Msg("get corp token failed: " + err.Error())
+			loc += err.Error()
+			return
+		}
+	}
+	user, err := getUserID(tokens[app.Wx.ID], m.Query("code"))
+	if err != nil {
+		if strings.Contains(err.Error(), "access_token expired") {
+			tokens[app.Wx.ID], err = requestCorpToken(app.Wx.CorpID, app.Wx.CorpSecret)
+			if err != nil {
+				log.Warn().Msg("refresh corp token failed: " + err.Error())
+				loc += err.Error()
+				return
+			}
+			user, err = getUserID(tokens[app.Wx.ID], m.Query("code"))
+			if err != nil {
+				log.Warn().Msg("get user token failed: " + err.Error())
+				loc += err.Error()
+				return
+			}
+		} else {
+			log.Warn().Msg("get user token failed: " + err.Error())
+			loc += err.Error()
+			return
+		}
+	}
+	info, err := getUserInfo(tokens[app.Wx.ID], user)
+	if err != nil {
+		log.Warn().Msg("get user info failed: " + err.Error())
+		loc += err.Error()
+		return
+	}
+	log.Warn().Msgf("\ncode= %s\nstate= %s\nu = %s\n%v",
+		m.Query("code"), m.Query("state"), user, info)
+	pass, err := utils.AesEncrypt(fmt.Sprintf("%s.%d", user, time.Now().Unix()), []byte(app.UUID))
+	if err != nil {
+		loc += err.Error()
+		return
+	}
+	log.Warn().Msgf("pass: %s", pass)
+	v := url.Values{}
+	v.Add("wid", pass)
+	u, err := url.Parse(app.Host)
+	u.RawQuery = v.Encode()
+	if err != nil {
+		loc += err.Error()
+		return
+	}
+	loc = u.String()
+}
+
+func requestCorpToken(corpid, corpsecret string) (string, error) {
+	addr := "https://qyapi.weixin.qq.com/cgi-bin/gettoken"
+	query := map[string]string{
+		"corpid":     corpid,
+		"corpsecret": corpsecret,
+	}
+	res := &struct {
+		Errmsg      string `json:"errmsg"`
+		Errcode     *uint  `json:"errcode"`
+		AccessToken string `json:"access_token"`
+	}{}
+	err := tools.Query(addr, query, res)
+	if err != nil {
+		return "", errors.New("request token response json parse err :" + err.Error())
+	}
+	if res.Errcode != nil && *res.Errcode == 0 {
+		return res.AccessToken, nil
+	} else {
+		//返回错误信息
+		err = errors.New(fmt.Sprintf("%d:%s", res.Errcode, res.Errmsg))
+		return "", err
+	}
+}
+
+func getUserID(token, code string) (string, error) {
+	addr := "https://qyapi.weixin.qq.com/cgi-bin/user/getuserinfo"
+	res := &struct {
+		Errmsg   string `json:"errmsg"`
+		Errcode  *uint  `json:"errcode"`
+		UserId   string `json:"UserId"`
+		DeviceId string `json:"device_id"`
+	}{}
+	query := map[string]string{
+		"access_token": token,
+		"code":         code,
+	}
+	err := tools.Query(addr, query, res)
+	if err != nil {
+		return "", err
+	}
+	if res.Errcode != nil && *res.Errcode == 0 {
+		return res.UserId, nil
+	}
+	return "", errors.New(fmt.Sprintf("%d:%s", res.Errcode, res.Errmsg))
+}
+
+func getUserInfo(token, id string) (interface{}, error) {
+	addr := "https://qyapi.weixin.qq.com/cgi-bin/user/get"
+	res := map[string]interface{}{}
+	query := map[string]string{
+		"access_token": token,
+		"userid":       id,
+	}
+	err := tools.Query(addr, query, &res)
+	if err != nil {
+		return "", err
+	}
+	errcode := int(res["errcode"].(float64))
+	errmsg := res["errmsg"].(string)
+	if errcode == 0 {
+		log.Warn().Msgf("%v", res)
+		return res, nil
+	}
+	return "", errors.New(fmt.Sprintf("%d:%s", errcode, errmsg))
+}

api/wx/router.go

@@ -0,0 +1,10 @@
+package wx
+
+import (
+	"github.com/veypi/OneBD"
+	"github.com/veypi/OneBD/rfc"
+)
+
+func Router(r OneBD.Router) {
+	r.Set("/login/:id", login, rfc.MethodGet)
+}