基于springboot架构钉钉扫码登录第三方应用

傷城~ 2023-07-18 04:52 2阅读 0赞

### 基于springboot架构 钉钉扫码登录第三方应用 ###

*  获取appId及appSecret
 *   *  项目应用
     *   *  1.配置文件增加如下配置
         *  2.下载sdk
         *  3.将sdk引入项目
         *  3.修改登录跳转方法/login
         *  4.登录页修改
         *  5.扫码重定向实现登录的方法如下
         *  6.重写UsernamePasswordToken

# 获取appId及appSecret #

点击进入[钉钉开发者平台][Link 1] 的页面，点击左侧菜单的【移动接入应用-登录】，然后点击右上角的【创建扫码登录应用授权】，创建用于免登过程中验证身份的appId及appSecret，创建后即可看到appId和appSecret。  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70][]

## 项目应用 ##

### 1.配置文件增加如下配置 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 1][]

### 2.下载sdk ###

下载地址： https://ding-doc.dingtalk.com/doc\#/faquestions/vzbp02

### 3.将sdk引入项目 ###

在resources下创建lib文件夹，放入下载的sdk  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 2][]  
pom.xml引入sdk jar包  
![20200324134559903.png][]

### 3.修改登录跳转方法/login ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 3][]

### 4.登录页修改 ###

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 4][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 5][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 6][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 7][]  
dingding.css文件

#background { position:fixed;left:0px;top:0px;
        background-color:black;
        width:100%;
        height:100%;
        opacity:0.5;
        display:none;
        z-Index:3;
    }
    #content { position:fixed;
        width:420px;
        height:420px;
        top:0;
        bottom:0;
        left:0;
        right:0;
        margin:auto;
        display:none;
        cursor:pointer;
        z-Index:3;
    }
    #close {
        float: right;
        margin-right: 50px;
        display: block;
        width: 32px;
        height: 32px;
        background: url(../img/close.png) no-repeat 0px 0px;
    }

dingding.js文件

//钉钉扫码登录
    function show()  //显示隐藏层和弹出层
    {
        var background=document.getElementById("background");
        background.style.display="block";  //显示隐藏层
        document.getElementById("content").style.display="block";  //显示弹出层
        //此处不采用初始加载办法，根据需要加载，提高加载速度
        var appId = $("#appId").val();
        var projectUrl = $("#projectUrl").val();
        /*
         * 解释一下goto参数，参考以下例子：
         * var url = encodeURIComponent('http://localhost.me/index.php?test=1&aa=2');
         * var goto = encodeURIComponent('https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=appid&response_type=code&scope=snsapi_login&state=STATE&redirect_uri='+url)
         */
        var redirectUrl = projectUrl+'loginSys';
        var goto = encodeURIComponent('https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid='+appId+'&response_type=code&scope=snsapi_login&state=STATE&redirect_uri='+redirectUrl);
        var obj = DDLogin({
            id:"login_container",//这里需要你在自己的页面定义一个HTML标签并设置id，例如<div id="login_container"></div>或<span id="login_container"></span>
            goto: goto, //请参考注释里的方式
            style: "border:none;background-color:#FFFFFF;",
            width : "365",
            height: "400"
        });
        var handleMessage = function (event) {
            var origin = event.origin;
            //console.log("origin", event.origin);
            if( origin == "https://login.dingtalk.com" ) { //判断是否来自ddLogin扫码事件。
                var loginTmpCode = event.data; //拿到loginTmpCode后就可以在这里构造跳转链接进行跳转了
                //console.log("loginTmpCode", loginTmpCode);
                window.location.href = 'https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid='+appId+'&response_type=code&scope=snsapi_login&state=STATE&redirect_uri='+redirectUrl+'&loginTmpCode='+ loginTmpCode;
            }
        };
        if (typeof window.addEventListener != 'undefined') {
            window.addEventListener('message', handleMessage, false);
        } else if (typeof window.attachEvent != 'undefined') {
            window.attachEvent('onmessage', handleMessage);
        }
    }
    function hide()  //去除隐藏层和弹出层
    {
        document.getElementById("background").style.display="none";
        document.getElementById("content").style.display="none";
    }

### 5.扫码重定向实现登录的方法如下 ###

/**
         * 扫码登录并跳转到index
         * @param request
         * @return
         */
        @RequestMapping("/loginSys")
        public String loginSys(HttpServletRequest request)
        {
            String code = request.getParameter("code");
            //String state = request.getParameter("state");
            String appId = ConstantConfig.dingtalkAppId;
            String appSecret = ConstantConfig.dingtalkAppSecret;
            String msg = "";
            //扫码登录
            try {
                //获取签名值
                String timestamp = String.valueOf(System.currentTimeMillis());
                String urlEncodeSignature = DingDingUtil.urlEncodeSignature(timestamp,appSecret);
                //获取unionId
                String url = ConstantConfig.dingtalkUserInfoUrl+"?accessKey="+appId+"&timestamp="+timestamp+"&signature="+urlEncodeSignature;
                DefaultDingTalkClient client = new DefaultDingTalkClient(url);
                OapiSnsGetuserinfoBycodeRequest req = new OapiSnsGetuserinfoBycodeRequest();
                req.setTmpAuthCode(code);
                OapiSnsGetuserinfoBycodeResponse response = client.execute(req,appId,appSecret);
                OapiSnsGetuserinfoBycodeResponse.UserInfo userInfo = response.getUserInfo();
                String unionId = userInfo.getUnionid();
                User use = sysService.selectUserByUnionId(unionId);
                //根据unionId 获取用户信息
                if (use != null && StringUtils.isNotEmpty(use.getUnionId())) {
                    //已绑定账号则直接登录操作
                    MyUsernamePasswordToken token = new MyUsernamePasswordToken(use.getLoginName(), use.getPassword(),false,true);
                    Subject subject = SecurityUtils.getSubject();
                    subject.login(token);
                    return redirect("/index");
                }else {
                    //未绑定
                    msg = "one";
                }
            } catch (Exception e) {
                e.printStackTrace();
                msg = "two";
            }
            return redirect("/login?msg="+msg);
        }

### 6.重写UsernamePasswordToken ###

package com.ruoyi.framework.shiro.authc;
    
    import org.apache.shiro.authc.UsernamePasswordToken;
    
    /**
     * Created by nao'nao on 2020/3/19.
     * @author
     */
    public class MyUsernamePasswordToken extends UsernamePasswordToken {
        private String username;
        private char[] password;
        private boolean rememberMe;
        private String host;
        private boolean encryption;
        private String passwords;
    
        public MyUsernamePasswordToken() {
            this.rememberMe = false;
            this.encryption = false;
        }
    
        public MyUsernamePasswordToken(String username, char[] password) {
            this(username, (char[])password, false, (String)null, false);
        }
    
        public MyUsernamePasswordToken(String username, String password) {
            this(username, (char[])(password != null?password.toCharArray():null), false, (String)null, false);
        }
    
        public MyUsernamePasswordToken(String username, char[] password, String host) {
            this(username, password, false, host, false);
        }
    
        public MyUsernamePasswordToken(String username, String password, String host) {
            this(username, password != null?password.toCharArray():null, false, host, false);
        }
    
        public MyUsernamePasswordToken(String username, char[] password, boolean rememberMe) {
            this(username, (char[])password, rememberMe, (String)null, false);
        }
    
        public MyUsernamePasswordToken(String username, String password, boolean rememberMe) {
            this(username, (char[])(password != null?password.toCharArray():null), rememberMe, (String)null,false);
        }
    
        public MyUsernamePasswordToken(String username, String password, boolean rememberMe, String host) {
            this(username, password != null?password.toCharArray():null, rememberMe, host,false);
        }
    
        public MyUsernamePasswordToken(String username, String passwords, boolean rememberMe, boolean encryption) {
            this(username, passwords, rememberMe, (String)null, encryption);
        }
    
        public MyUsernamePasswordToken(String username, char[] password, boolean rememberMe, String host, boolean encryption) {
            this.rememberMe = false;
            this.encryption = false;
            this.username = username;
            this.password = password;
            this.rememberMe = rememberMe;
            this.host = host;
            this.encryption = encryption;
        }
    
        public MyUsernamePasswordToken(String username, String passwords, boolean rememberMe, String host, boolean encryption) {
            this.rememberMe = false;
            this.encryption = false;
            this.username = username;
            this.passwords = passwords;
            this.rememberMe = rememberMe;
            this.host = host;
            this.encryption = encryption;
        }
    
        @Override
        public String getUsername() {
            return username;
        }
    
        @Override
        public void setUsername(String username) {
            this.username = username;
        }
    
        @Override
        public char[] getPassword() {
            return password;
        }
    
        @Override
        public void setPassword(char[] password) {
            this.password = password;
        }
    
        @Override
        public boolean isRememberMe() {
            return rememberMe;
        }
    
        @Override
        public void setRememberMe(boolean rememberMe) {
            this.rememberMe = rememberMe;
        }
    
        @Override
        public String getHost() {
            return host;
        }
    
        @Override
        public void setHost(String host) {
            this.host = host;
        }
    
        public boolean isEncryption() {
            return encryption;
        }
    
        public void setEncryption(boolean encryption) {
            this.encryption = encryption;
        }
    
        public String getPasswords() {
            return passwords;
        }
    
        public void setPasswords(String passwords) {
            this.passwords = passwords;
        }
    
        @Override
        public Object getPrincipal() {
            return this.getUsername();
        }
    
        @Override
        public Object getCredentials() {
            if (this.isEncryption()) {
                return this.getPasswords();
            }else {
                return this.getPassword();
            }
        }
    
        @Override
        public void clear() {
            this.username = null;
            this.host = null;
            this.rememberMe = false;
            this.encryption = false;
            if(this.password != null) {
                for(int i = 0; i < this.password.length; ++i) {
                    this.password[i] = 0;
                }
    
                this.password = null;
            }
            if (this.passwords != null) {
                this.passwords = null;
            }
    
        }
    
        @Override
        public String toString() {
            StringBuilder sb = new StringBuilder();
            sb.append(this.getClass().getName());
            sb.append(" - ");
            sb.append(this.username);
            sb.append(", rememberMe=").append(this.rememberMe);
            sb.append(", encryption=").append(this.encryption);
            if(this.host != null) {
                sb.append(" (").append(this.host).append(")");
            }
    
            return sb.toString();
        }
    }

以上为整合钉钉扫码的主要代码，并不是全部代码，仅供参考  
[参考文献][Link 2]

[Link 1]: https://oa.dingtalk.com/#/login
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70]: /images/20230528/4eeb122126964b97a9cef9e806df5fcb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 1]: /images/20230528/f7b20913bf994da1ae34a860f27500e2.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 2]: /images/20230528/5834a2ce5afb4b878a636a3e7dedf0fe.png
[20200324134559903.png]: /images/20230528/26bf8b271bef4d678a2ea0c1c89f1076.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 3]: /images/20230528/55e409b6a2094e0ea497abba74747d84.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 4]: /images/20230528/a014a480bbde4ae4bd747026c42a7f19.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 5]: /images/20230528/91c5819290ee40a5b03628ae8da927a1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 6]: /images/20230528/dd6f387163594b7d924ba22ed701f98d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NzZG41NjU5NzM4NTA_size_16_color_FFFFFF_t_70 7]: /images/20230528/0c77dc94a1154014a2338aa888b8c197.png
[Link 2]: https://ding-doc.dingtalk.com/doc#/serverapi2/kymkv6