majiameng /
OAuth2
| 1 | <?php |
||
| 2 | namespace tinymeng\OAuth2\Connector; |
||
| 3 | |||
| 4 | use tinymeng\OAuth2\Exception\OAuthException; |
||
| 5 | use tinymeng\OAuth2\Helper\ConstCode; |
||
| 6 | use tinymeng\OAuth2\Helper\Str; |
||
| 7 | |||
| 8 | /** |
||
| 9 | * 所有第三方登录必须继承的抽象类 |
||
| 10 | */ |
||
| 11 | abstract class Gateway implements GatewayInterface |
||
| 12 | { |
||
| 13 | use GatewayTrait; |
||
| 14 | /** |
||
| 15 | * 授权地址 |
||
| 16 | * @var |
||
| 17 | */ |
||
| 18 | protected $AuthorizeURL; |
||
| 19 | |||
| 20 | /** |
||
| 21 | * 获取token地址 |
||
| 22 | * @var |
||
| 23 | */ |
||
| 24 | protected $AccessTokenURL; |
||
| 25 | |||
| 26 | /** |
||
| 27 | * 获取token地址 |
||
| 28 | * @var |
||
| 29 | */ |
||
| 30 | protected $UserInfoURL; |
||
| 31 | |||
| 32 | /** |
||
| 33 | * 配置参数 |
||
| 34 | * @var array |
||
| 35 | */ |
||
| 36 | protected $config; |
||
| 37 | |||
| 38 | /** |
||
| 39 | * AppId |
||
| 40 | * @var array |
||
| 41 | */ |
||
| 42 | protected $app_id; |
||
| 43 | |||
| 44 | /** |
||
| 45 | * AppSecret |
||
| 46 | * @var string |
||
| 47 | */ |
||
| 48 | protected $app_secret; |
||
| 49 | |||
| 50 | /** |
||
| 51 | * 接口权限值 |
||
| 52 | * @var |
||
| 53 | */ |
||
| 54 | protected $scope; |
||
| 55 | |||
| 56 | /** |
||
| 57 | * 回调地址 |
||
| 58 | * @var string |
||
| 59 | */ |
||
| 60 | protected $callback; |
||
| 61 | |||
| 62 | /** |
||
| 63 | * 当前时间戳 |
||
| 64 | * @var int |
||
| 65 | */ |
||
| 66 | protected $timestamp; |
||
| 67 | |||
| 68 | /** |
||
| 69 | * 默认第三方授权页面样式 |
||
| 70 | * @var string |
||
| 71 | */ |
||
| 72 | protected $display = 'default'; |
||
| 73 | |||
| 74 | /** |
||
| 75 | * 登录类型:app applets |
||
| 76 | * @var bool |
||
| 77 | */ |
||
| 78 | protected $type; |
||
| 79 | |||
| 80 | /** |
||
| 81 | * 第三方Token信息 |
||
| 82 | * @var array |
||
| 83 | */ |
||
| 84 | protected $token = null; |
||
| 85 | |||
| 86 | /** |
||
| 87 | * 是否验证回跳地址中的state参数 |
||
| 88 | * @var boolean |
||
| 89 | */ |
||
| 90 | protected $checkState = false; |
||
| 91 | |||
| 92 | /** |
||
| 93 | * 第三方返回的userInfo |
||
| 94 | * @var array |
||
| 95 | */ |
||
| 96 | protected $userInfo = []; |
||
| 97 | |||
| 98 | /** |
||
| 99 | * 格式化的userInfo |
||
| 100 | * @var array |
||
| 101 | */ |
||
| 102 | protected $formatUserInfo = []; |
||
| 103 | |||
| 104 | |||
| 105 | /** |
||
| 106 | * Gateway constructor. |
||
| 107 | * @param $config |
||
| 108 | * @throws OAuthException |
||
| 109 | */ |
||
| 110 | public function __construct($config) |
||
| 111 | { |
||
| 112 | if (!$config) { |
||
| 113 | throw new OAuthException('传入的配置不能为空'); |
||
| 114 | } |
||
| 115 | if(isset($_GET['referer']) && $config['callback']){ |
||
| 116 | $config['callback'] .= ((strpos($config['callback'], '?') !== false) ? '&' : '?').'referer='.$_GET['referer']; |
||
| 117 | } |
||
| 118 | //默认参数 |
||
| 119 | $_config = [ |
||
| 120 | 'app_id' => '', |
||
| 121 | 'app_secret' => '', |
||
| 122 | 'callback' => '', |
||
| 123 | 'response_type' => 'code', |
||
| 124 | 'grant_type' => 'authorization_code', |
||
| 125 | 'proxy' => '', |
||
| 126 | 'state' => '', |
||
| 127 | 'type' => '', |
||
| 128 | 'is_sandbox' => false,//是否是沙箱环境 |
||
| 129 | ]; |
||
| 130 | $this->config = array_merge($_config, $config); |
||
| 131 | foreach($this->config as $key=>$val){ |
||
| 132 | if(property_exists($this,$key)) $this->$key=$val; |
||
| 133 | } |
||
| 134 | $this->timestamp = time(); |
||
| 135 | } |
||
| 136 | |||
| 137 | /** |
||
| 138 | * Description: 设置授权页面样式 |
||
| 139 | * @author: JiaMeng <[email protected]> |
||
| 140 | * Updater: |
||
| 141 | * @param $display |
||
| 142 | * @return $this |
||
| 143 | */ |
||
| 144 | public function setDisplay($display) |
||
| 145 | { |
||
| 146 | $this->display = $display; |
||
| 147 | return $this; |
||
| 148 | } |
||
| 149 | |||
| 150 | /** |
||
| 151 | * Description: 设置是否是App |
||
| 152 | * @author: JiaMeng <[email protected]> |
||
| 153 | * Updater: |
||
| 154 | * @return $this |
||
| 155 | */ |
||
| 156 | public function setType($type) |
||
| 157 | { |
||
| 158 | $this->type = $type; |
||
| 159 | return $this; |
||
| 160 | } |
||
| 161 | |||
| 162 | /** |
||
| 163 | * Description: 强制验证回跳地址中的state参数 |
||
| 164 | * @author: JiaMeng <[email protected]> |
||
| 165 | * Updater: |
||
| 166 | * @return $this |
||
| 167 | */ |
||
| 168 | public function mustCheckState(){ |
||
| 169 | $this->checkState = true; |
||
| 170 | return $this; |
||
| 171 | } |
||
| 172 | |||
| 173 | /** |
||
| 174 | * 获取配置信息 |
||
| 175 | * @Author: TinyMeng <[email protected]> |
||
| 176 | * @return array |
||
| 177 | */ |
||
| 178 | public function getConfig(){ |
||
| 179 | return $this->config; |
||
| 180 | } |
||
| 181 | |||
| 182 | /** |
||
| 183 | * 设置token(App登录时) |
||
| 184 | * @param $token |
||
| 185 | * @return $this |
||
| 186 | */ |
||
| 187 | public function setToken($token){ |
||
| 188 | $this->token = $token; |
||
| 189 | return $this; |
||
| 190 | } |
||
| 191 | |||
| 192 | /** |
||
| 193 | * 存储state |
||
| 194 | * @Author: TinyMeng <[email protected]> |
||
| 195 | */ |
||
| 196 | public function saveState(){ |
||
| 197 | if ($this->checkState === true) { |
||
| 198 | //是否开启session |
||
| 199 | if (session_status() !== PHP_SESSION_ACTIVE) { |
||
| 200 | session_start(); |
||
| 201 | } |
||
| 202 | if(empty($this->config['state'])){ |
||
| 203 | $this->config['state'] = Str::random();//生成随机state |
||
| 204 | } |
||
| 205 | //存储到session |
||
| 206 | $_SESSION['tinymeng_oauth_state'] = $this->config['state']; |
||
| 207 | } |
||
| 208 | } |
||
| 209 | |||
| 210 | /** |
||
| 211 | * 验证state |
||
| 212 | * @Author: TinyMeng <[email protected]> |
||
| 213 | * @throws OAuthException |
||
| 214 | */ |
||
| 215 | public function checkState(){ |
||
| 216 | if ($this->checkState === true) { |
||
| 217 | if (session_status() !== PHP_SESSION_ACTIVE) { |
||
| 218 | session_start(); |
||
| 219 | } |
||
| 220 | if (!isset($_REQUEST['state']) || !isset($_SESSION['tinymeng_oauth_state']) || $_REQUEST['state'] != $_SESSION['tinymeng_oauth_state']) { |
||
| 221 | throw new OAuthException('传递的STATE参数不匹配!'); |
||
| 222 | } |
||
| 223 | } |
||
| 224 | } |
||
| 225 | |||
| 226 | |||
| 227 | /** |
||
| 228 | * 获取授权后的Code |
||
| 229 | * @author: JiaMeng <[email protected]> |
||
| 230 | * @return string |
||
| 231 | */ |
||
| 232 | public function getCode(){ |
||
| 233 | return isset($_REQUEST['code']) ? $_REQUEST['code'] : ''; |
||
| 234 | } |
||
| 235 | |||
| 236 | /** |
||
| 237 | * Description: 默认获取AccessToken请求参数 |
||
| 238 | * @author: JiaMeng <[email protected]> |
||
| 239 | * Updater: |
||
| 240 | * @return array |
||
| 241 | */ |
||
| 242 | protected function accessTokenParams(){ |
||
| 243 | $params = [ |
||
| 244 | 'client_id' => $this->config['app_id'], |
||
| 245 | 'client_secret' => $this->config['app_secret'], |
||
| 246 | 'grant_type' => $this->config['grant_type'], |
||
| 247 | 'code' => $this->getCode(), |
||
| 248 | 'redirect_uri' => $this->config['callback'], |
||
| 249 | ]; |
||
| 250 | return $params; |
||
| 251 | } |
||
| 252 | |||
| 253 | /** |
||
| 254 | * Description: 获取AccessToken |
||
| 255 | * @author: JiaMeng <[email protected]> |
||
| 256 | * Updater: |
||
| 257 | */ |
||
| 258 | protected function getToken(){ |
||
| 259 | if (empty($this->token)) { |
||
| 260 | /** 验证state参数 */ |
||
| 261 | $this->checkState(); |
||
| 262 | |||
| 263 | /** 获取参数 */ |
||
| 264 | $params = $this->accessTokenParams(); |
||
| 265 | |||
| 266 | /** 获取access_token */ |
||
| 267 | $token = $this->post($this->AccessTokenURL, $params,$this->getHeaders()); |
||
| 268 | /** 解析token值(子类实现此方法) */ |
||
| 269 | $this->token = $this->parseToken($token); |
||
|
0 ignored issues
–
show
Bug
introduced
by
Loading history...
|
|||
| 270 | }else{ |
||
| 271 | return $this->token; |
||
| 272 | } |
||
| 273 | } |
||
| 274 | |||
| 275 | /** |
||
| 276 | * 格式化性别参数 |
||
| 277 | * M代表男性,F代表女性 |
||
| 278 | * @param $gender |
||
| 279 | */ |
||
| 280 | public function getGender($gender){ |
||
| 281 | return strtolower(substr($gender , 0 , 1)) == 'm' ? ConstCode::GENDER_MAN : ConstCode::GENDER_WOMEN; |
||
| 282 | } |
||
| 283 | |||
| 284 | |||
| 285 | /** |
||
| 286 | * 刷新AccessToken续期 |
||
| 287 | * @param string $refreshToken |
||
| 288 | * @return bool |
||
| 289 | */ |
||
| 290 | public function refreshToken($refreshToken) |
||
| 291 | { |
||
| 292 | return true; |
||
| 293 | } |
||
| 294 | |||
| 295 | /** |
||
| 296 | * 检验授权凭证AccessToken是否有效 |
||
| 297 | * @param string $accessToken |
||
| 298 | * @return bool |
||
| 299 | */ |
||
| 300 | public function validateAccessToken($accessToken = null) |
||
| 301 | { |
||
| 302 | return true; |
||
| 303 | } |
||
| 304 | |||
| 305 | } |
||
| 306 |