UT框架官网

开发方式

代码开发

可视化开发

开发资源

衍生系统

文档有错误？
发信:usualtool@qq.com

定位至目录

代码开发百科目录

OAuth第三方授权程序示例

第一步：组装授权地址

第二步：根据Code换取Access Token

php>>>
session_start();
define('CLIENT_ID',     'testapp');
define('CLIENT_SECRET', 'PxxV3uywkMxxxTqL');
define('REDIRECT_URI',  'http://locahost/?p=callback');
define('OAUTH_SERVER',  'http://server/?m=oauth&p=oauth');
if (!isset($_GET['state']) || !hash_equals($_GET['state'], $_SESSION['oauth_state'] ?? '')) {
    http_response_code(400);
    die('ERROR:STATE参数无效');
}
if (isset($_GET['error'])) {
    $error = htmlspecialchars($_GET['error']);
    $desc  = isset($_GET['error_description']) ? ': ' . htmlspecialchars($_GET['error_description']) : '';
    die("授权错误： {$error}{$desc}");
}
if (!isset($_GET['code'])) {
    http_response_code(400);
    die('ERROR:CODE错误');
}
$code = $_GET['code'];
$tokenUrl = OAUTH_SERVER . '&route=token';
$postFields = http_build_query([
    'grant_type'    => 'authorization_code',
    'code'          => $code,
    'redirect_uri'  => REDIRECT_URI,
    'client_id'     => CLIENT_ID,
    'client_secret' => CLIENT_SECRET
], '', '&', PHP_QUERY_RFC3986);
$ch = curl_init();
curl_setopt_array($ch, [
    CURLOPT_URL            => $tokenUrl,
    CURLOPT_POST           => true,
    CURLOPT_POSTFIELDS     => $postFields,
    CURLOPT_HTTPHEADER     => ['Content-Type: application/x-www-form-urlencoded'],
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_TIMEOUT        => 30,
    CURLOPT_SSL_VERIFYPEER => false//生产环境可启用
]);
$response = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$error    = curl_error($ch);
curl_close($ch);
if ($httpCode !== 200) {
    die("ERROR:网络错误");
}
$tokenData = json_decode($response, true);
if (json_last_error() !== JSON_ERROR_NONE || !isset($tokenData['access_token'])) {
    error_log("Invalid token response: $response");
    http_response_code(500);
    die("ERROR:令牌无效");
}
$access_token = htmlspecialchars($tokenData['access_token']);
$expires_in   = $tokenData['expires_in'] ?? 'N/A';
?>
<!DOCTYPE html>
<html>
<head>
    <meta charset="UTF-8">
    <title>授权成功</title>
    <style>body { font-family: Arial, sans-serif; padding: 20px; }</style>
</head>
<body>
    <h2>授权成功</h2>
    <p><strong>Access Token:</strong></p>
    <code style="display:block; background:#f5f5f5; padding:10px; word-break:break-all;">
        <?php echo $access_token;?>
    </code>
    <p>过期时间: <?php echo $expires_in;?> seconds</p>
</body>
</html>