├── .gitignore
├── .htaccess
├── README.md
├── app
    ├── app.php
    ├── config
    │   ├── common.php
    │   ├── config.php
    │   ├── loader.php
    │   └── services.php
    ├── services
    │   ├── JwtAuth.php
    │   ├── Wechat.php
    │   └── WechatAuth.php
    └── views
    │   ├── 404.phtml
    │   ├── auth-login-error.phtml
    │   ├── auth-login.phtml
    │   ├── auth-login2.phtml
    │   ├── auth-redirect-demo.phtml
    │   ├── index.phtml
    │   └── qrcode-login-demo.phtml
├── composer.json
├── index.html
└── public
    ├── .htaccess
    ├── img
        └── login-logo.png
    └── index.php


/.gitignore:
--------------------------------------------------------------------------------
1 | log/
2 | cache/
3 | .idea/
4 | vendor/
5 | composer.lock
6 | resource/
7 | .DS_Store
8 | app/.DS_Store
9 | Runtime/


--------------------------------------------------------------------------------
/.htaccess:
--------------------------------------------------------------------------------
1 | <IfModule mod_rewrite.c>
2 | 	RewriteEngine on
3 | 	RewriteRule  ^$ public/    [L]
4 | 	RewriteRule  (.*) public/$1 [L]
5 | </IfModule>


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | 项目介绍
 2 | =======
 3 | 微信授权桥接项目，可能我们在做微信开发的时候会遇到一个问题，一个公众号只能绑定一个域名，那很多项目都是一个域名一个项目，那应该怎么办呢，我们又不能申请很多公众号，那这个项目就是为这种情况准备的
 4 | [线上地址](https://admin.fastgoo.net/vue/dist/index.html).
 5 | 
 6 | 安装
 7 | ------------
 8 | 该框架需要安装扩展
 9 | [官方扩展安装](https://phalconphp.com/zh/download/linux)
10 | [开发扩展工具](https://github.com/phalcon/phalcon-devtools)
11 | [中文扩展安装](http://www.iphalcon.cn/reference/install.html)
12 | 
13 | ```bash
14 | git clone https://github.com/jungege520/wechat-auth.phalcon.git wechat-auth
15 | cd phalcon
16 | composer install
17 | ```
18 | 
19 | 范例
20 | ------------
21 | 1、[扫描二维码登录](https://wechat.zhoujianjun.cn/qrcodeDemo)<br/>
22 | ```bash
23 | 设计思路：
24 | 生成一张待authKey参数的二维码，该参数随机且不重复
25 | 用户扫描二维码，先跳转到微信授权页面授权，同时把授权获得信息存入缓存，该缓存带有状态
26 | 用户点击确认登录，修改缓存状态为1，取消则为2 无操作默认0
27 | 网站通过计划任务向指定接口获取到对应key值的缓存数据（该缓存数据通过jwt加密成token），
28 | 获取到对应的用户信息的token以后跳转到预设好的回调地址，同时在url带上wechatToken参数，该参数需要在服务端解密
29 | ```
30 | 
31 | 
32 | 2、[跳转重定向登录](https://wechat.zhoujianjun.cn/redirectDemo)
33 | ```bash
34 | 设计思路：
35 | 网站跳转到指定的授权回调地址同时带上redirectUrl的参数，该参数为回调参数
36 | 授权回调地址通过微信授权以后直接把对应的数据加密成token拼装到redirectUrl上去
37 | 该参数需要在服务端解密
38 | ```
39 | 
40 | 备注：为什么一定要加密，就是为了防止用户的数据通过缓存以后被劫持篡改，所以通过jwt加密以后提交数据的安全性，但是这也导致url链接变长
41 | 
42 | 依赖包
43 | -------
44 | 
45 | 1、[PHP-JWT token认证](https://github.com/firebase/php-jwt)：集成JWT认证类，已封装加密解密的类方法<br>
46 | 
47 | 2、[微信SDK](https://github.com/thenbsp/wechat)：微信的大部分常用的SDK都已封装，可查看WIKI文档<br>
48 | 
49 | 2、[二维码生成类](https://github.com/SimpleSoftwareIO/simple-qrcode)：常用的二维码生成类包<br>
50 | 
51 | 
52 | 
53 | 微型项目结构
54 | -------
55 | 
56 | ```bash
57 | project/
58 |   app/
59 |     config/       ---配置文件
60 |     services/     ---业务类（存放业务操作方法）
61 |     views/        ---视图
62 |   public/         ---公共资源
63 |     css/
64 |     img/
65 |     js/
66 |   cache/          ---缓存文件（缓存，视图）
67 |   vendor/         ---composer包管理
68 | ```
69 | 
70 | 
71 | 感言
72 | -------
73 | 
74 | 1、命名空间是个大坑，写方法的时候一定要注意命名空间的使用，一不小心就坑的你吐。
75 | 
76 | 2、不要重复造轮子，多去找找有没有composer包，[点击传送门](https://packagist.org/)
77 | 
78 | 3、多查看手册  [官方英文手册](https://docs.phalconphp.com/en/3.2) [3.0的中文手册](http://www.iphalcon.cn/)
79 | 
80 | 4、记住多看手册，基本上大部分遇到的坑都会在手册查看，类的用法可以多查API [点击传送门](https://docs.phalconphp.com/en/3.2/api/index)
81 | 
82 | 
83 | 
84 | 加入我们
85 | -------
86 | 交流群：150237524
87 | 
88 | 我的QQ：773729704 记得备注github
89 | 
90 | 我的微信：huoniaojugege  记得备注github
91 | 


--------------------------------------------------------------------------------
/app/app.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | /**
  3 |  * Local variables
  4 |  * @var \Phalcon\Mvc\Micro $app
  5 |  */
  6 | 
  7 | use Phalcon\Cache\Backend\File as BackFile;
  8 | use Phalcon\Cache\Frontend\Data as FrontData;
  9 | 
 10 | header('Access-Control-Allow-Origin: *');
 11 | header("Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization");
 12 | header('Access-Control-Allow-Methods: GET, POST, PUT,DELETE');
 13 | 
 14 | /**
 15 |  * 初始化缓存设置
 16 |  */
 17 | $cache = new BackFile(new FrontData(["lifetime" => 300]), ["cacheDir" => BASE_PATH . "/cache/"]);
 18 | 
 19 | 
 20 | function responseData($code = 1, $msg = 'success', $data = [])
 21 | {
 22 |     if (empty($data) || (!is_array($data) && !is_object($data))) {
 23 |         $data = new stdClass();
 24 |     }
 25 |     $response = \Phalcon\Di::getDefault()->getResponse();
 26 |     $response->setJsonContent(compact('code', 'msg', 'data'));
 27 |     $response->send();
 28 |     die;
 29 | }
 30 | 
 31 | 
 32 | /**
 33 |  * Add your routes here
 34 |  */
 35 | $app->get('/', function () {
 36 |     echo $this['view']->render('index');
 37 | });
 38 | 
 39 | /**
 40 |  * TODO ===========================   微信扫码登录   ============================================
 41 |  */
 42 | 
 43 | /**
 44 |  * 获取登录二维码
 45 |  */
 46 | /**
 47 |  * 微信扫码授权
 48 |  * 授权数据存入缓存
 49 |  * 同时跳转页面到是否同意登录申请，同意则登录，不同意则取消
 50 |  */
 51 | $app->get('/getQrcode', function () {
 52 |     $key = !empty($_GET['authKey']) ? $_GET['authKey'] : 123;
 53 |     $qrcode = new SimpleSoftwareIO\QrCode\BaconQrCodeGenerator();
 54 |     $qrcodeEn = $qrcode->size(300)->generate('https://wechat.zhoujianjun.cn/authLogin?timestamp=' . (time() + 300) . '&authKey=' . $key);
 55 |     echo $qrcodeEn;
 56 | });
 57 | 
 58 | 
 59 | /**
 60 |  * 微信扫码授权
 61 |  * 授权数据存入缓存
 62 |  * 同时跳转页面到是否同意登录申请，同意则登录，不同意则取消
 63 |  */
 64 | $app->get('/authLogin', function () use ($cache) {
 65 |     $key = !empty($_GET['authKey']) ? $_GET['authKey'] : '';
 66 |     $timestamp = !empty($_GET['timestamp']) ? $_GET['timestamp'] : '';
 67 |     if (empty($key)) {
 68 |         $this['view']->error = '授权KEY获取失败';
 69 |         exit($this['view']->render('auth-login-error'));
 70 |     }
 71 |     if ($timestamp < time()) {
 72 |         $this['view']->error = '该二维码已失效，请重新二维码';
 73 |         exit($this['view']->render('auth-login-error'));
 74 |     }
 75 |     $wechatInfo = $cache->get($key);
 76 |     if (!$wechatInfo) {
 77 |         $wechat = new Services\WechatAuth();
 78 |         $wechatInfo = ['userInfo' => $wechat->auth(), 'status' => 0];
 79 |         $cache->save($key, $wechatInfo);
 80 |     } else {
 81 |         if ($wechatInfo['status'] == 1) {
 82 |             $this['view']->error = '该二维码已失效，请重新二维码';
 83 |             exit($this['view']->render('auth-login-error'));
 84 |         }
 85 |     }
 86 |     $this->session->set('openid', $wechatInfo['userInfo']->openid);
 87 |     $this['view']->authKey = $key;
 88 |     echo $this['view']->render('auth-login2');
 89 | });
 90 | 
 91 | /**
 92 |  * 设置缓存授权状态
 93 |  */
 94 | $app->post('/setAuth', function () use ($cache) {
 95 |     $key = !empty($_POST['authKey']) ? $_POST['authKey'] : '';
 96 |     $status = !empty($_POST['status']) ? $_POST['status'] : '';
 97 |     if (empty($key)) {
 98 |         responseData(-1, '授权key不能为空');
 99 |     }
100 |     $authCache = $cache->get($key);
101 |     if (!$authCache) {
102 |         responseData(-100, '该用户未微信授权，请重新授权登录');
103 |     }
104 |     if ($this->session->get('openid') != $authCache['userInfo']->openid) {
105 |         responseData(-1, '不可操作其他用户的数据');
106 |     }
107 |     $authCache['status'] = $status ? 1 : 2;
108 |     $flag = $cache->save($key, $authCache);
109 |     if ($flag) {
110 |         responseData(1, $status?'授权成功':'已取消');
111 |     } else {
112 |         responseData(-1, '授权失败');
113 |     }
114 | });
115 | 
116 | /**
117 |  * 获取认证授权状态
118 |  * 如果用户已授权则返回对应的缓存数据
119 |  */
120 | $app->map('/getAuth', function () use ($cache) {
121 |     $request = new \Phalcon\Http\Request();
122 |     if($request->isOptions()){
123 |         responseData(-1, '快速返回跨域信息');
124 |     }
125 |     $key = !empty($_POST['authKey']) ? $_POST['authKey'] : '';
126 |     $key = !empty($_GET['authKey'])?$_GET['authKey']:$key;
127 |     if (empty($key)) {
128 |         responseData(-1, '授权key不能为空');
129 |     }
130 |     $authCache = $cache->get($key);
131 |     if (!$authCache || empty($authCache['status'])) {
132 |         responseData(-2, '该用户未微信授权，请重新授权登录');
133 |     }
134 |     if ($authCache['status'] == 2) {
135 |         responseData(-5, '该用户已取消登录');
136 |     }
137 |     $token = \Services\JwtAuth::type()->encode($authCache['userInfo']);
138 |     responseData(1, '授权成功', compact('token'));
139 | });
140 | 
141 | 
142 | /**
143 |  * TODO ===========================   微信公众号重定向授权登录   ============================================
144 |  */
145 | 
146 | /**
147 |  * 微信web公众号授权
148 |  * 授权获取用户信息，直接跳转到改用户设置的回调地址上同时带上用户信息
149 |  */
150 | $app->get('/authWeb', function () use ($cache) {
151 |     $url = !empty($_GET['redirectUrl']) ? $_GET['redirectUrl'] : '';
152 |     if (empty($url)) {
153 |         $this['view']->error = '回调地址异常';
154 |         exit($this['view']->render('auth-login-error'));
155 |     }
156 |     $wechat = new Services\WechatAuth();
157 |     $userInfo = $wechat->auth();
158 |     $userInfo->expire_time = time() + 60;
159 |     $checkParam = strpos($url, '?');
160 |     if ($checkParam) {
161 |         $url = $url . '&wechatToken=' . \Services\JwtAuth::type()->encode($userInfo);
162 |     } else {
163 |         $url = $url . '?wechatToken=' . \Services\JwtAuth::type()->encode($userInfo);
164 |     }
165 |     header("Location:" . $url);
166 | });
167 | 
168 | 
169 | /**
170 |  * 微信web公众号授权
171 |  * 授权获取用户信息，直接跳转到改用户设置的回调地址上同时带上用户信息
172 |  */
173 | $app->get('/getUser', function () use ($cache) {
174 |     $userI = \Services\JwtAuth::type()->decode($_GET['wechatToken']);
175 |     var_dump($userI, 111111);
176 | });
177 | 
178 | 
179 | /**
180 |  * 二维码登录demo
181 |  */
182 | $app->get('/qrcodeDemo',function (){
183 |     echo $this['view']->render('qrcode-login-demo');
184 | });
185 | 
186 | /**
187 |  * 重定向登录demo
188 |  */
189 | $app->get('/redirectDemo',function (){
190 |     echo $this['view']->render('auth-redirect-demo');
191 | });
192 | 
193 | /**
194 |  * Not found handler
195 |  */
196 | $app->notFound(function () use ($app) {
197 |     $app->response->setStatusCode(404, "Not Found")->sendHeaders();
198 |     echo $app['view']->render('404');
199 | });
200 | 


--------------------------------------------------------------------------------
/app/config/common.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 |  * Created by PhpStorm.
 4 |  * User: Mr.Zhou
 5 |  * Date: 2017/7/17
 6 |  * Time: 下午2:27
 7 |  */
 8 | 
 9 | return new \Phalcon\Config([
10 | 
11 |     /**
12 |      * 微信授权认证配置
13 |      */
14 |     'wechat_auth' => [
15 |         'app_id' => 'wx3f37b98cf00ee980',
16 |         'secret' => '31f38c6df982f1be471df244bdeb5cfe',
17 |     ],
18 | 
19 |     /**
20 |      * 签名信息配置信息
21 |      */
22 |     'api_sign' => [
23 |         'key' => '',
24 |         'status' => true,
25 |         'expire_time' => 120,
26 |     ],
27 |     /**
28 |      * 七牛上传配置信息
29 |      */
30 |     'qiniu' => [
31 |         'accessKey' => '',
32 |         'secretKey' => '',
33 |         'bucket' => '',
34 |         'url' => '',
35 |     ],
36 |     /**
37 |      * Jpush极光推送配置
38 |      */
39 |     'jpush' => [
40 |         'default' => [
41 |             'app_key' => '',
42 |             'master_secret' => '',
43 |             'production' => false,
44 |         ]
45 |     ],
46 |     /**
47 |      * 微信支付配置信息
48 |      */
49 |     'wechat_pay' => [
50 |         'app' => [
51 |             'app_id' => '',
52 |             'app_secret' => '',
53 |             'mch_id' => '',
54 |             'md5_key' => '',
55 |             'cert_pem' => '',
56 |             'key_pem' => '',
57 |         ],
58 |         'web' => [
59 |             'app_id' => '',
60 |             'app_secret' => '',
61 |             'mch_id' => '',
62 |             'md5_key' => '',
63 |             'cert_pem' => BASE_PATH.'/resource/wechat/apiclient_cert.pem',
64 |             'key_pem' => BASE_PATH.'/resource/wechat/apiclient_key.pem',
65 |         ]
66 |     ],
67 |     /**
68 |      * 支付宝支付
69 |      */
70 |     'alipay' => [
71 |         'app_id' => '',
72 |         'partner' => '',
73 |         'seller_id'=>'',
74 |         'ali_public_key' => BASE_PATH.'/resource/alipay/alipay_public_key.pem',
75 |         'rsa_private_key' => BASE_PATH.'/resource/alipay/rsa_private_key.pem',
76 |     ],
77 |     /**
78 |      * JwtAuth token授权配置
79 |      */
80 |     'jwt_auth'=>[
81 |         'type'=>'HS256',
82 |         'key'=>'zhouxiansheng',
83 |         'privete'=>BASE_PATH.'/resource/jwtauth/id_ras',
84 |         'public'=>BASE_PATH.'/resource/jwtauth/id_ras.pub',
85 |     ],
86 | ]);


--------------------------------------------------------------------------------
/app/config/config.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /*
 3 |  * Modified: prepend directory path of current file, because of this file own different ENV under between Apache and command line.
 4 |  * NOTE: please remove this comment.
 5 |  */
 6 | defined('BASE_PATH') || define('BASE_PATH', getenv('BASE_PATH') ?: realpath(dirname(__FILE__) . '/../..'));
 7 | defined('APP_PATH') || define('APP_PATH', BASE_PATH . '/app');
 8 | 
 9 | return new \Phalcon\Config([
10 |     'database' => [
11 |         'adapter'    => 'Mysql',
12 |         'host'       => 'localhost',
13 |         'username'   => 'root',
14 |         'password'   => '',
15 |         'dbname'     => 'test',
16 |         'charset'    => 'utf8',
17 |     ],
18 | 
19 |     'application' => [
20 |         'viewsDir'       => APP_PATH . '/views/',
21 |         'baseUri'        => '/wechat-auth/',
22 |     ]
23 | ]);
24 | 


--------------------------------------------------------------------------------
/app/config/loader.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /**
 4 |  * Registering an autoloader
 5 |  */
 6 | $loader = new \Phalcon\Loader();
 7 | 
 8 | $loader->registerDirs(
 9 |     [
10 |         $config->application->viewsDir
11 |     ]
12 | )->register();
13 | 
14 | 
15 | /**
16 |  * 注册命名空间
17 |  */
18 | $loader->registerNamespaces([
19 |     'Services' => '../app/services',
20 | ])->register();
21 | 


--------------------------------------------------------------------------------
/app/config/services.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Phalcon\Mvc\View\Simple as View;
 4 | use Phalcon\Mvc\Url as UrlResolver;
 5 | use Phalcon\Session\Adapter\Files as Session;
 6 | 
 7 | $di->setShared(
 8 |     "session",
 9 |     function () {
10 |         $session = new Session();
11 |         $session->start();
12 |         return $session;
13 |     }
14 | );
15 | 
16 | /**
17 |  * Shared configuration service
18 |  */
19 | $di->setShared('config', function () {
20 |     return include APP_PATH . "/config/config.php";
21 | });
22 | 
23 | /**
24 |  * Shared configuration service
25 |  */
26 | $di->setShared('commonConfig', function () {
27 |     return include APP_PATH . "/config/common.php";
28 | });
29 | 
30 | /**
31 |  * Sets the view component
32 |  */
33 | $di->setShared('view', function () {
34 |     $config = $this->getConfig();
35 | 
36 |     $view = new View();
37 |     $view->setViewsDir($config->application->viewsDir);
38 |     return $view;
39 | });
40 | 
41 | /**
42 |  * The URL component is used to generate all kind of urls in the application
43 |  */
44 | $di->setShared('url', function () {
45 |     $config = $this->getConfig();
46 | 
47 |     $url = new UrlResolver();
48 |     $url->setBaseUri($config->application->baseUri);
49 |     return $url;
50 | });
51 | 
52 | /**
53 |  * Database connection is created based in the parameters defined in the configuration file
54 |  */
55 | $di->setShared('db', function () {
56 |     $config = $this->getConfig();
57 | 
58 |     $class = 'Phalcon\Db\Adapter\Pdo\\' . $config->database->adapter;
59 |     $params = [
60 |         'host' => $config->database->host,
61 |         'username' => $config->database->username,
62 |         'password' => $config->database->password,
63 |         'dbname' => $config->database->dbname,
64 |         'charset' => $config->database->charset
65 |     ];
66 | 
67 |     if ($config->database->adapter == 'Postgresql') {
68 |         unset($params['charset']);
69 |     }
70 | 
71 |     $connection = new $class($params);
72 | 
73 |     return $connection;
74 | });
75 | 
76 | 


--------------------------------------------------------------------------------
/app/services/JwtAuth.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 |  * Created by PhpStorm.
 4 |  * User: Mr.Zhou
 5 |  * Date: 2017/7/19
 6 |  * Time: 下午7:46
 7 |  */
 8 | 
 9 | namespace Services;
10 | 
11 | use Firebase\JWT\JWT;
12 | use Phalcon\Di;
13 | use Exception;
14 | 
15 | class JwtAuth
16 | {
17 |     private static $jwtKey;
18 |     private static $type;
19 |     private static $privateKey;
20 |     private static $publicKey;
21 | 
22 |     /**
23 |      * 设置token签名类型  RS256   HS256
24 |      * @param string $type
25 |      * @return JwtAuth
26 |      */
27 |     public static function type($type = '')
28 |     {
29 |         $jwt_auth_config = Di::getDefault()->get("commonConfig")->jwt_auth;
30 | 
31 |         /** 优先获取用户设置 */
32 |         if (!$type) {
33 |             if ($jwt_auth_config->type == 'RS256') {
34 |                 self::$privateKey = file_get_contents($jwt_auth_config->privete);
35 |                 self::$publicKey = file_get_contents($jwt_auth_config->public);
36 |             } else {
37 |                 self::$jwtKey = $jwt_auth_config->key;
38 |             }
39 |             self::$type = $jwt_auth_config->type;
40 |         } else {
41 |             if ($type == 'RS256') {
42 |                 self::$privateKey = file_get_contents($jwt_auth_config->privete);
43 |                 self::$publicKey = file_get_contents($jwt_auth_config->public);
44 |             } else {
45 |                 self::$jwtKey = $jwt_auth_config->key;
46 |             }
47 |             self::$type = $type;
48 |         }
49 |         return new self();
50 |     }
51 | 
52 |     /**
53 |      * 生成token字符串
54 |      * @param $data
55 |      * @return string
56 |      */
57 |     public function encode($data = array())
58 |     {
59 |         if (self::$type == 'RS256') {
60 |             $tokenStr = JWT::encode($data, self::$privateKey, self::$type);
61 |         } else {
62 |             $tokenStr = JWT::encode($data, self::$jwtKey);
63 |         }
64 |         return $tokenStr;
65 | 
66 |     }
67 | 
68 |     /**
69 |      * 验证token字符串
70 |      * 返回数组
71 |      * @param string $jwt
72 |      * @return object
73 |      */
74 |     public function decode($jwt = '')
75 |     {
76 |         try {
77 |             if (self::$type == 'RS256') {
78 |                 $data = JWT::decode($jwt, self::$publicKey, array(self::$type));
79 |             } else {
80 |                 $data = JWT::decode($jwt, self::$jwtKey, array(self::$type));
81 |             }
82 |             if(!is_array($data) && !is_object($data)){
83 |                 throw new Exception('授权认证失败');
84 |             }else{
85 |                 //logMessage('jwt-auth')->log('授权成功----->'.json_encode($data));
86 |                 return $data;
87 |             }
88 |         }catch (Exception $e){
89 |             //logMessage('jwt-auth')->error('授权失败----->'.$jwt);
90 |             return false;
91 |         }
92 |     }
93 | 
94 | 
95 | }


--------------------------------------------------------------------------------
/app/services/Wechat.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 |  * Created by PhpStorm.
 4 |  * User: Mr.Zhou
 5 |  * Date: 2017/7/29
 6 |  * Time: 下午1:40
 7 |  */
 8 | 
 9 | namespace Services;
10 | 
11 | use Thenbsp\Wechat\OAuth\Client;
12 | use Phalcon\Cache\Backend\File as BackFile;
13 | use Phalcon\Cache\Frontend\Data as FrontData;
14 | 
15 | class Wechat
16 | {
17 | 
18 |     private $config;
19 |     private $key;
20 | 
21 |     public function __construct()
22 |     {
23 |         $this->config = \Phalcon\Di::getDefault()->get('wechat_config');
24 |     }
25 |     /**
26 |      * 微信授权登录
27 |      */
28 |     public function auth($key,$url)
29 |     {
30 |         $client = new Client($this->config->auth->app_id, $this->config->auth->secret);
31 |         $client->setScope('snsapi_userinfo');
32 |         $client->setRedirectUri('https://'.$_SERVER['HTTP_HOST'].'/redirect');
33 | 
34 |         if (!isset($_GET['code'])) {
35 |             header('Location: ' . $client->getAuthorizeUrl());
36 |         }
37 |         $accessToken = $client->getAccessToken($_GET['code']);
38 |         $userinfo = $accessToken->getUser()->toArray();
39 | 
40 |         $cache =  new BackFile(new FrontData(["lifetime" => 120]), ["cacheDir" => BASE_PATH."/cache/"]);
41 |         $cache->save($key, ['redirectUrl'=>$url,'userInfo'=>$userinfo,'accessToken'=>$accessToken->toArray()]);
42 |     }
43 | 
44 |     /**
45 |      * 获取授权缓存信息
46 |      * @param $key
47 |      * @return mixed
48 |      */
49 |     public function getAuth($key)
50 |     {
51 |         $cache =  new BackFile(new FrontData(["lifetime" => 120]), ["cacheDir" => BASE_PATH."/cache/"]);
52 |         return $cache->get($key);
53 |     }
54 | }


--------------------------------------------------------------------------------
/app/services/WechatAuth.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 |  * Created by PhpStorm.
 4 |  * User: Mr.Zhou
 5 |  * Date: 2017/7/17
 6 |  * Time: 下午7:21
 7 |  */
 8 | namespace Services;
 9 | 
10 | use Phalcon\Di;
11 | 
12 | class WechatAuth
13 | {
14 |     private $appId;
15 |     private $appSecret;
16 | 
17 |     public function __construct($param = array())
18 |     {
19 |         $config = Di::getDefault()->get("commonConfig")->wechat_auth;
20 |         $this->appId = $config->app_id;
21 |         $this->appSecret = $config->secret;
22 |     }
23 | 
24 |     public function auth()
25 |     {
26 |         $res = $this->GetOpenid();
27 |         $url = "https://api.weixin.qq.com/sns/userinfo?access_token=" . $res['access_token'] . "&openid=" . $res['openid'] . "&lang=zh_CN";
28 |         $ret = json_decode(file_get_contents($url));
29 |         $ret->unionid = isset($res['unionid'])?$res['unionid']:'';
30 |         return $ret;
31 |     }
32 | 
33 |     public function GetOpenid()
34 |     {
35 |         //通过code获得openid
36 |         if (!isset($_GET['code'])) {
37 |             //触发微信返回code码
38 |             $baseUrl = urlencode('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
39 |             $url = $this->__CreateOauthUrlForCode($baseUrl);
40 |             Header("Location: $url");
41 |             exit();
42 |         } else {
43 |             //获取code码，以获取openid
44 |             $code = $_GET['code'];
45 |             return $this->getOpenidFromMp($code);
46 |         }
47 |     }
48 | 
49 |     private function __CreateOauthUrlForCode($redirectUrl)
50 |     {
51 |         $urlObj["appid"] = $this->appId;
52 |         $urlObj["redirect_uri"] = "$redirectUrl";
53 |         $urlObj["response_type"] = "code";
54 |         $urlObj["scope"] = "snsapi_userinfo";
55 |         $urlObj["state"] = "STATE" . "#wechat_redirect";
56 |         $bizString = $this->ToUrlParams($urlObj);
57 |         return "https://open.weixin.qq.com/connect/oauth2/authorize?" . $bizString;
58 |     }
59 | 
60 |     public function GetOpenidFromMp($code)
61 |     {
62 |         $url = $this->__CreateOauthUrlForOpenid($code);
63 |         $ch = curl_init();
64 |         curl_setopt($ch, CURLOPT_TIMEOUT, 10);
65 |         curl_setopt($ch, CURLOPT_URL, $url);
66 |         curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
67 |         curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
68 |         curl_setopt($ch, CURLOPT_HEADER, FALSE);
69 |         curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
70 |         //运行curl，结果以jason形式返回
71 |         $res = curl_exec($ch);
72 |         curl_close($ch);
73 |         return json_decode($res, true);
74 |     }
75 | 
76 |     private function __CreateOauthUrlForOpenid($code)
77 |     {
78 |         $urlObj["appid"] = $this->appId;
79 |         $urlObj["secret"] = $this->appSecret;
80 |         $urlObj["code"] = $code;
81 |         $urlObj["grant_type"] = "authorization_code";
82 |         $bizString = $this->ToUrlParams($urlObj);
83 |         return "https://api.weixin.qq.com/sns/oauth2/access_token?" . $bizString;
84 |     }
85 | 
86 |     private function ToUrlParams($urlObj)
87 |     {
88 |         $buff = "";
89 |         foreach ($urlObj as $k => $v) {
90 |             if ($k != "sign") {
91 |                 $buff .= $k . "=" . $v . "&";
92 |             }
93 |         }
94 |         $buff = trim($buff, "&");
95 |         return $buff;
96 |     }
97 | }


--------------------------------------------------------------------------------
/app/views/404.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |     <head>
 4 |         <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
 5 |         <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
 6 |         <title>Phalcon PHP Framework</title>
 7 |     </head>
 8 |     <body>
 9 |         <div class="container">
10 |             <h1>Not found :(</h1>
11 |             <em>This page is located in views/404.phtml</em>
12 |         </div>
13 |     </body>
14 | </html>
15 | 


--------------------------------------------------------------------------------
/app/views/auth-login-error.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | <head>
 4 |     <meta charset="utf-8">
 5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1">
 7 |     <link rel="stylesheet" href="https://res.wx.qq.com/open/libs/weui/1.1.0/weui.min.css">
 8 |     <script type="text/javascript" src="https://res.wx.qq.com/open/libs/weuijs/1.1.1/weui.min.js"></script>
 9 |     <title>Phalcon PHP Framework</title>
10 | </head>
11 | <body>
12 | <div class="container">
13 |     <div class="page">
14 |         <div class="weui-msg">
15 |             <br>
16 |             <div class="weui-msg__icon-area"><i class="weui-icon-warn weui-icon_msg"></i></div>
17 |             <br/>
18 |             <div class="weui-msg__text-area">
19 |                 <h2 class="weui-msg__title"><?=$error;?></h2>
20 |             </div>
21 |             <div class="weui-msg__extra-area">
22 |                 <div class="weui-footer">
23 |                     <p class="weui-footer__text">Copyright &copy; fastgoo.net</p>
24 |                 </div>
25 |             </div>
26 |         </div>
27 |     </div>
28 | </div>
29 | </body>
30 | </html>
31 | 


--------------------------------------------------------------------------------
/app/views/auth-login.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | <head>
 4 |     <meta charset="utf-8">
 5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1">
 7 |     <link rel="stylesheet" href="https://res.wx.qq.com/open/libs/weui/1.1.0/weui.min.css">
 8 |     <script type="text/javascript" src="https://res.wx.qq.com/open/libs/weuijs/1.1.1/weui.min.js"></script>
 9 |     <title>授权登录</title>
10 | </head>
11 | <body>
12 | <div class="container">
13 |     <div class="page">
14 |         <div class="weui-msg">
15 |             <input id="authKey" value="<?=$authKey;?>" type="hidden"/>
16 |             <div class="weui-msg__icon-area"><i class="weui-icon-warn weui-icon_msg"></i></div>
17 |             <div class="weui-msg__text-area">
18 |                 <h2 class="weui-msg__title">确认登录</h2>
19 |                 <p class="weui-msg__desc">即将登录<a href="javascript:void(0);">快捷行</a>，请确认是本人登录。如果非本人登录请取消操作</p>
20 |             </div>
21 |             <div class="weui-msg__opr-area">
22 |                 <p class="weui-btn-area">
23 |                     <a id="confirm" class="weui-btn weui-btn_primary">确认登录</a>
24 |                     <a id="cancel" class="weui-btn weui-btn_default">取消</a>
25 |                 </p>
26 |             </div>
27 |             <div class="weui-msg__extra-area">
28 |                 <div class="weui-footer">
29 |                     <!--<p class="weui-footer__links">
30 |                         <a href="javascript:void(0);" class="weui-footer__link">底部链接文本</a>
31 |                     </p>-->
32 |                     <p class="weui-footer__text">Copyright &copy; fastgoo.net</p>
33 |                 </div>
34 |             </div>
35 |         </div>
36 |     </div>
37 | </div>
38 | <script src="https://cdn.bootcss.com/jquery/3.2.1/jquery.min.js"></script>
39 | <script>
40 |     $(function () {
41 |         $("#confirm").on("click",function () {
42 |             setAuth(1);
43 |         });
44 | 
45 |         $("#cancel").on("click",function () {
46 |             setAuth(0);
47 |         });
48 | 
49 |         function setAuth(status) {
50 |             $.post('/setAuth',{authKey:$("#authKey").val(),status:status},function (res) {
51 |                 if(res.code ==1){
52 |                     weui.toast(res.msg, {
53 |                         duration: 1500,
54 |                         className: 'custom-classname',
55 |                         callback: function(){
56 |                             WeixinJSBridge.call('closeWindow');
57 |                         }
58 |                     });
59 |                 }else{
60 |                     weui.topTips(res.msg, 3000);
61 |                 }
62 |             },'json')
63 |         }
64 |     })
65 | </script>
66 | </body>
67 | </html>
68 | 


--------------------------------------------------------------------------------
/app/views/auth-login2.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html lang=en>
 3 | <head>
 4 |     <meta charset=UTF-8>
 5 |     <meta http-equiv=X-UA-Compatible content="IE=edge,chrome=1">
 6 |     <meta name=viewport content="width=device-width,user-scalable=no,initial-scale=1,maximum-scale=1,minimum-scale=1">
 7 |     <meta name=description content="">
 8 |     <meta name=keywords content="">
 9 |     <link rel="stylesheet" href="https://res.wx.qq.com/open/libs/weui/1.1.0/weui.min.css">
10 |     <script type="text/javascript" src="https://res.wx.qq.com/open/libs/weuijs/1.1.1/weui.min.js"></script>
11 |     <title>微信登录</title>
12 |     <script>!function (n, e) {
13 |         var t = n.documentElement, i = "orientationchange" in window ? "orientationchange" : "resize", d = function () {
14 |             var n = t.clientWidth;
15 |             n && (t.style.fontSize = n > 640 ? "24px" : n / 320 * 14 + "px")
16 |         };
17 |         n.addEventListener && (e.addEventListener(i, d, !1), n.addEventListener("DOMContentLoaded", d, !1))
18 |     }(document, window)</script>
19 |     <style>
20 |         html{font-size:12px;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%;-webkit-tap-highlight-color:rgba(0,0,0,0)}@media (min-width:320px){html{font-size:14px}}@media (min-width:360px){html{font-size:16px}}@media (min-width:400px){html{font-size:18px}}@media (min-width:440px){html{font-size:20px}}@media (min-width:480px){html{font-size:22px}}@media (min-width:640px){html{font-size:24px}}body{line-height:1.4;font-size:1rem;color:#333;font-family:Helvetica Neue,Helvetica,Arial,sans-serif}*{margin:0;padding:0}*,:after,:before{box-sizing:border-box}a img{border:0}li,ul{list-style:none}body,html{height:100%;-webkit-overflow-scrolling:touch}body{padding:0 1.714286rem}.top-logo{padding-top:2.857143rem;padding-bottom:2.142857rem;text-align:center;border-bottom:1px solid rgba(0,0,0,.05)}.top-logo h3{font-size:1.285714rem;font-weight:400}.prompt-text{padding:2.142857rem 0;font-size:1rem}.prompt-text .txt1{display:inline-block;color:#666;font-size:.857143rem;margin-top:1.142857rem;margin-left:.357143rem}.prompt-text .txt1 .dot{display:inline-block;width:4px;height:4px;border-radius:50%;background-color:#666;margin-right:.714286rem;vertical-align:middle}.btn-cancel,.btn-sure{width:100%;height:2.571429rem;text-align:center;outline:0;-webkit-appearance:none;appearance:none;border:none;font-size:1.142857rem;border-radius:5px}.btn-cancel:active,.btn-cancel:hover,.btn-sure:active,.btn-sure:hover{opacity:.7}.btn-sure{color:#fff;background-color:#1aad19;margin-bottom:1.142857rem}.btn-cancel{position:relative;color:#333;background-color:#f7f7f7}.btn-cancel:after{content:" ";width:200%;height:200%;position:absolute;top:0;left:0;border:1px solid #aaa;-webkit-transform:scale(.5);transform:scale(.5);-webkit-transform-origin:0 0;transform-origin:0 0;border-radius:10px}
21 |     </style>
22 | </head>
23 | <body>
24 | <div class=top-logo>
25 |     <input id="authKey" value="<?=$authKey;?>" type="hidden"/>
26 |     <img src="/img/login-logo.png" alt=快捷行软件 width="30%">
27 |     <h3>快捷行软件</h3></div>
28 | <div class=prompt-text>即将登录快捷行软件，请确认是本人操作 <span class=txt1><span class=dot></span>使用你的账号登录该应用</span></div>
29 | <div class=operator>
30 |     <button type=button id="confirm"  class=btn-sure>确认登录</button>
31 |     <button type=button id="cancel"  class=btn-cancel>取消</button>
32 | </div>
33 | <script src="https://cdn.bootcss.com/jquery/3.2.1/jquery.min.js"></script>
34 | <script>
35 |     $(function () {
36 |         $("#confirm").on("click",function () {
37 |             setAuth(1);
38 |         });
39 | 
40 |         $("#cancel").on("click",function () {
41 |             setAuth(0);
42 |         });
43 | 
44 |         function setAuth(status) {
45 |             $.post('/setAuth',{authKey:$("#authKey").val(),status:status},function (res) {
46 |                 if(res.code ==1){
47 |                     weui.toast(res.msg, {
48 |                         duration: 1500,
49 |                         className: 'custom-classname',
50 |                         callback: function(){
51 |                             WeixinJSBridge.call('closeWindow');
52 |                         }
53 |                     });
54 |                 }else{
55 |                     weui.topTips(res.msg, 3000);
56 |                 }
57 |             },'json')
58 |         }
59 |     })
60 | </script>
61 | </body>
62 | </html>


--------------------------------------------------------------------------------
/app/views/auth-redirect-demo.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | <head>
 4 |     <meta charset="utf-8">
 5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1">
 7 |     <link rel="stylesheet" href="https://res.wx.qq.com/open/libs/weui/1.1.0/weui.min.css">
 8 |     <script type="text/javascript" src="https://res.wx.qq.com/open/libs/weuijs/1.1.1/weui.min.js"></script>
 9 |     <title>授权登录</title>
10 | </head>
11 | <body>
12 | 
13 | <div class="page">
14 |     <div class="page__hd">
15 |         <br/>
16 |         <p class="page__desc" style="text-align: center">重定向跳转</p>
17 |         <br>
18 |     </div>
19 |     <div class="page__bd">
20 |         <div class="weui-cells">
21 |             <div class="weui-cell">
22 |                 <div class="weui-cell__bd">
23 |                     <input class="weui-input" type="text" id="url" value="https://wechat.zhoujianjun.cn/getUser" placeholder="请输入文本"/>
24 |                 </div>
25 |             </div>
26 |         </div>
27 |         <br>
28 |         <div class="weui-btn-area">
29 |             <a class="weui-btn weui-btn_primary" href="javascript:" onclick="redirectUrl()">点击跳转</a>
30 |         </div>
31 |     </div>
32 | </div>
33 | <script src="https://cdn.bootcss.com/jquery/3.2.1/jquery.min.js"></script>
34 | <script>
35 |     function redirectUrl() {
36 |         location.href="https://wechat.zhoujianjun.cn/authWeb?redirectUrl="+$("#url").val();
37 |     }
38 | </script>
39 | </body>
40 | </html>
41 | 


--------------------------------------------------------------------------------
/app/views/index.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 |     <head>
 4 |         <meta charset="utf-8">
 5 |         <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |         <meta name="viewport" content="width=device-width, initial-scale=1">
 7 |         <!-- The above 3 meta tags *must* come first in the head; any other head content must come *after* these tags -->
 8 |         <title>Phalcon PHP Framework</title>
 9 |         <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
10 |     </head>
11 |     <body>
12 |         <div class="container">
13 | 
14 |             <div class="page-header">
15 |                 <h1>Congratulations!</h1>
16 |             </div>
17 | 
18 |             <p>You're now flying with Phalcon. Great things are about to happen!</p>
19 | 
20 |             <p>This page is located at <code>views/index.phtml</code></p>
21 |         </div>
22 |         <!-- jQuery (necessary for Bootstrap's JavaScript plugins) -->
23 |         <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.0/jquery.min.js"></script>
24 |         <!-- Latest compiled and minified JavaScript -->
25 |         <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
26 |     </body>
27 | </html>
28 | 


--------------------------------------------------------------------------------
/app/views/qrcode-login-demo.phtml:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html>
 2 | <html>
 3 | <head>
 4 |     <meta charset="utf-8">
 5 |     <meta http-equiv="X-UA-Compatible" content="IE=edge">
 6 |     <meta name="viewport" content="width=device-width, initial-scale=1">
 7 |     <link rel="stylesheet" href="https://res.wx.qq.com/open/libs/weui/1.1.0/weui.min.css">
 8 |     <script type="text/javascript" src="https://res.wx.qq.com/open/libs/weuijs/1.1.1/weui.min.js"></script>
 9 |     <title>授权登录</title>
10 | </head>
11 | <body>
12 | 
13 | <div class="page">
14 |     <div class="page__hd">
15 |         <br/>
16 |         <p class="page__desc" style="text-align: center">二维码扫描跳转</p>
17 |         <div style="text-align: center">
18 |             <embed width="320" height="320" id="qrcode" src="" type="image/svg+xml"/>
19 |         </div>
20 | 
21 |     </div>
22 |     <div class="page__bd">
23 |         <div class="weui-cells weui-cells_form">
24 |             <div class="weui-cell">
25 |                 <div class="weui-cell__bd">
26 |                     <textarea id="redirectUrl" class="weui-textarea" placeholder="请输入跳转的URL地址" rows="3">https://wechat.zhoujianjun.cn/getUser</textarea>
27 |                     <div class="weui-textarea-counter"><span>0</span>/200</div>
28 |                 </div>
29 |             </div>
30 |         </div>
31 |     </div>
32 | </div>
33 | <script src="https://cdn.bootcss.com/jquery/3.2.1/jquery.min.js"></script>
34 | <script>
35 |     $(function () {
36 |         var authKey;
37 |         var taskId;
38 |         getQrcode();
39 |         function getQrcode() {
40 |             authKey = parseInt(Math.random() * (999999 - 100000 + 1) + 100000);
41 |             $("#qrcode").attr('src', "https://wechat.zhoujianjun.cn/getQrcode?authKey=" + authKey);
42 |         }
43 | 
44 |         function getAuthStatus() {
45 |             console.log($("#redirectUrl").val());
46 |             $.post('/getAuth', {authKey: authKey}, function (res) {
47 |                 if (res.code == 1) {
48 |                     location.href = $("#redirectUrl").val() + "&wechatToken=" + res.data.token;
49 |                     clearInterval(taskId);
50 |                 }
51 |                 if (res.code == -1 || res.code == -5) {
52 |                     alert(res.msg);
53 |                     clearInterval(taskId);
54 |                 }
55 |             }, 'json')
56 |         }
57 | 
58 |         setTimeout(function () {
59 |             taskId = window.setInterval(getAuthStatus, 3000);
60 |         },12000);
61 |     })
62 | </script>
63 | </body>
64 | </html>
65 | 


--------------------------------------------------------------------------------
/composer.json:
--------------------------------------------------------------------------------
1 | {
2 |   "require": {
3 |     "thenbsp/wechat": "*",
4 |     "simplesoftwareio/simple-qrcode": "~1",
5 |     "firebase/php-jwt": "*"
6 |   }
7 | }
8 | 


--------------------------------------------------------------------------------
/index.html:
--------------------------------------------------------------------------------
1 | <html><body><h1>Mod-Rewrite is not enabled</h1><p>Please enable rewrite module on your web server to continue</body></html>


--------------------------------------------------------------------------------
/public/.htaccess:
--------------------------------------------------------------------------------
1 | AddDefaultCharset UTF-8
2 | 
3 | <IfModule mod_rewrite.c>
4 |     RewriteEngine On
5 |     RewriteCond %{REQUEST_FILENAME} !-f
6 |     RewriteRule ^(.*)$ index.php?_url=/$1 [QSA,L]
7 | </IfModule>


--------------------------------------------------------------------------------
/public/img/login-logo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/fastgoo/wechat-auth.phalcon/39183cabd491686b6acdf6bc0d819e11ff09b1f6/public/img/login-logo.png


--------------------------------------------------------------------------------
/public/index.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | use Phalcon\Di\FactoryDefault;
 4 | use Phalcon\Mvc\Micro;
 5 | 
 6 | error_reporting(E_ALL);
 7 | 
 8 | define('BASE_PATH', dirname(__DIR__));
 9 | define('APP_PATH', BASE_PATH . '/app');
10 | 
11 | try {
12 | 
13 |     /**
14 |      * The FactoryDefault Dependency Injector automatically registers the services that
15 |      * provide a full stack framework. These default services can be overidden with custom ones.
16 |      */
17 |     $di = new FactoryDefault();
18 | 
19 |     /**
20 |      * Include Services
21 |      */
22 |     include APP_PATH . '/config/services.php';
23 | 
24 |     /**
25 |      * Get config service for use in inline setup below
26 |      */
27 |     $config = $di->getConfig();
28 | 
29 |     /**
30 |      * Include Autoloader
31 |      */
32 |     include APP_PATH . '/config/loader.php';
33 | 
34 |     /**
35 |      * Starting the application
36 |      * Assign service locator to the application
37 |      */
38 |     $app = new Micro($di);
39 | 
40 |     /**
41 |      * Include Application
42 |      */
43 |     include APP_PATH . '/app.php';
44 | 
45 |     /**
46 |      * 引入composer自动加载类
47 |      */
48 |     include BASE_PATH . "/vendor/autoload.php";
49 | 
50 |     /**
51 |      * Handle the request
52 |      */
53 |     $app->handle();
54 | 
55 | } catch (\Exception $e) {
56 |       echo $e->getMessage() . '<br>';
57 |       echo '<pre>' . $e->getTraceAsString() . '</pre>';
58 | }
59 | 


--------------------------------------------------------------------------------