QQ第三方授权登录OAuth2.0实现（Java）

2022-09-20 21:58:34

准备材料

1.已经备案好的域名
2.服务器（域名和服务器为统一主体或域名已接入服务器）
3.QQ号
4.开发流程：https://wiki.connect.qq.com/准备工作_oauth2-0

创建应用

1.访问 https://connect.qq.com/manage.html ，登录。
2.创建网站应用，填写网站基本信息以及平台信息，提交审核。注：网站回调域后续会用到，是点击授权登录时回调地址，需要与后续开发一致。

程序开发

1. 添加QQ登录按钮，用于点击跳转至QQ授权登录页

<a href="/account/qqConnect" class="blog-user"> <i

				class="fa fa-qq"></i>

			</a>

2. Java后台实现页面跳转

2.1 编写一个工具类

QQUtil

package cn.zwqh.springboot.common.qq;

import java.io.IOException;

import java.net.URLEncoder;

import org.apache.http.client.ClientProtocolException;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import com.alibaba.fastjson.JSON;

import com.alibaba.fastjson.JSONException;

import com.alibaba.fastjson.JSONObject;

import cn.zwqh.springboot.common.http.HttpClientUtils;

import cn.zwqh.springboot.entity.sys.User;

public class QQUtil {

	private static final Logger log = LoggerFactory.getLogger(QQUtil.class);

	private static final String QQ_APP_ID="XXX";//改成自己的

	private static final String QQ_APP_SECRET="XXX";//改成自己的

	private static final String LOGIN_REDIRECT_URI="https://www.zwqh.top/account/qqLogin";	//改成自己的

	private static final String BIND_REDIRECT_URI="https://www.zwqh.top/account/qqBind";									  //改成自己的

	private static final String AUTH_CODE_URL="https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id="+QQ_APP_ID+"&redirect_uri=REDIRECT_URI&state=STATE";

    private static final String ACCESS_TOKEN_URL="https://graph.qq.com/oauth2.0/token?client_id="+QQ_APP_ID+"&client_secret="+QQ_APP_SECRET+"&code=CODE&grant_type=authorization_code&redirect_uri=REDIRECT_URI";

    private static final String REFRESH_TOKEN_URL="https://graph.qq.com/oauth2.0/token?client_id="+QQ_APP_ID+"&client_secret="+QQ_APP_SECRET+"&grant_type=refresh_token&refresh_token=REFRESH_TOKEN";

    private static final String OPEN_ID_URL="https://graph.qq.com/oauth2.0/me?access_token=ACCESS_TOKEN";

    private static final String USER_INFO_URL="https://graph.qq.com/user/get_user_info?access_token=ACCESS_TOKEN&oauth_consumer_key="+QQ_APP_ID+"&openid=OPENID";

    public static JSONObject getJsonStrByQueryUrl(String paramStr){

        String[] params = paramStr.split("&");

        JSONObject obj = new JSONObject();

        for (int i = 0; i < params.length; i++) {

            String[] param = params[i].split("=");

            if (param.length >= 2) {

                String key = param[0];

                String value = param[1];

                for (int j = 2; j < param.length; j++) {

                    value += "=" + param[j];

                }

                try {

                    obj.put(key,value);

                } catch (JSONException e) {

                    e.printStackTrace();

                }

            }

        }

        return obj;

    }

    /**

     * 获取授权登录页码url

     * @return

     */

    public static String getLoginConnectUrl(String state) {

    	String url=null;

    	try{

    		url=AUTH_CODE_URL.replace("REDIRECT_URI", URLEncoder.encode(LOGIN_REDIRECT_URI, "utf-8")).replace("STATE", state);

    	}catch (Exception e) {

			log.error(e.toString());

		}

		return url;

	}

    /**

     * 获取授权绑定页码url

     * @return

     */

    public static String getBindConnectUrl() {

    	String url=null;

    	try{

    		url=AUTH_CODE_URL.replace("REDIRECT_URI", URLEncoder.encode(BIND_REDIRECT_URI, "utf-8"));

    	}catch (Exception e) {

			log.error(e.toString());

		}

		return url;

	}

    /**

     * 获取AccessToken

     * @return 返回拿到的access_token及有效期

     */

    public static QQAccessToken getQQLoginAccessToken(String code) throws ClientProtocolException, IOException{

    	QQAccessToken token = new QQAccessToken();

        String url = ACCESS_TOKEN_URL.replace("CODE", code).replace("REDIRECT_URI", URLEncoder.encode(LOGIN_REDIRECT_URI, "utf-8"));

        log.info("这是请求路径："+url);

        String result = HttpClientUtils.doGet(url);

        JSONObject jsonObject=getJsonStrByQueryUrl(result);

        log.info("这是返回结果："+jsonObject);

        if(jsonObject!=null){ //如果返回不为空，将返回结果封装进AccessToken实体类

            token.setAccessToken(jsonObject.getString("access_token"));//接口调用凭证

            token.setExpiresIn(jsonObject.getInteger("expires_in"));//access_token接口调用凭证超时时间，单位（秒）

            token.setRefreshToken(jsonObject.getString("refresh_token"));

        }

        return token;

    }

    /**

     * 获取AccessToken

     * @return 返回拿到的access_token及有效期

     */

    public static QQAccessToken getQQBindAccessToken(String code) throws ClientProtocolException, IOException{

    	QQAccessToken token = new QQAccessToken();

        String url = ACCESS_TOKEN_URL.replace("CODE", code).replace("REDIRECT_URI", URLEncoder.encode(BIND_REDIRECT_URI, "utf-8"));

        log.info("这是请求路径："+url);

        String result = HttpClientUtils.doGet(url);

        JSONObject jsonObject=getJsonStrByQueryUrl(result);

        log.info("这是返回结果："+jsonObject);

        if(jsonObject!=null){ //如果返回不为空，将返回结果封装进AccessToken实体类

            token.setAccessToken(jsonObject.getString("access_token"));//接口调用凭证

            token.setExpiresIn(jsonObject.getInteger("expires_in"));//access_token接口调用凭证超时时间，单位（秒）

            token.setRefreshToken(jsonObject.getString("refresh_token"));

        }

        return token;

    }

    /**

     * 刷新或续期access_token使用

     * @return 返回拿到的access_token及有效期

     */

    public static QQAccessToken refreshQQAccessToken(String refreshToken) throws ClientProtocolException, IOException{

    	QQAccessToken token = new QQAccessToken();

        String url = REFRESH_TOKEN_URL.replace("REFRESH_TOKEN",refreshToken);

        log.info("这是请求路径："+url);

        String result = HttpClientUtils.doGet(url);

        log.info("这是返回结果："+result);

        JSONObject jsonObject=getJsonStrByQueryUrl(result);

        log.info("这是转为json的结果："+jsonObject);

        if(jsonObject!=null){ //如果返回不为空，将返回结果封装进AccessToken实体类

            token.setAccessToken(jsonObject.getString("access_token"));//接口调用凭证

            token.setExpiresIn(jsonObject.getInteger("expires_in"));//access_token接口调用凭证超时时间，单位（秒）

            token.setRefreshToken(jsonObject.getString("refresh_token"));

        }

        return token;

    }

    /**

     * 获取QQopenId

     * @return QQopenId

     */

    public static String getQQOpenId(String accessToken) throws ClientProtocolException, IOException{

        String url = OPEN_ID_URL.replace("ACCESS_TOKEN",accessToken);

        log.info("这是请求路径："+url);

        String result = HttpClientUtils.doGet(url).replace("callback(", "").replace(");", "");

        log.info("这是返回结果："+result);

        JSONObject jsonObject=JSON.parseObject(result);

        log.info("这是转为json的结果："+jsonObject);

        if(jsonObject!=null&&jsonObject.getString("openid")!=null){ //如果返回不为空

            return jsonObject.getString("openid");

        }

        return null;

    }

    /**

     * 获取QQ用户信息

     * @param accessToken

     * @param openId

     * @return

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static JSONObject getUserInfo(String accessToken, String openId) throws ClientProtocolException, IOException {

        // 拼接请求地址

        String url = USER_INFO_URL.replace("ACCESS_TOKEN", accessToken).replace("OPENID", openId);

        log.info("这是请求路径："+url);

        String result = HttpClientUtils.doGet(url);

        log.info("这是返回结果："+result);

        JSONObject jsonObject=JSONObject.parseObject(result);

        log.info("这是转为json的结果："+jsonObject);

        JSONObject json=new JSONObject();

        if (jsonObject!=null&&jsonObject.getInteger("ret").equals(0)) {

            try {

            	User user= new User();

                // 用户的标识

                user.setQqId(openId);

                // 昵称

                user.setNickname(jsonObject.getString("nickname"));

                if(jsonObject.getString("figureurl_2")!=null&&!jsonObject.getString("figureurl_2").isEmpty()) {

                	  // 用户头像

                    user.setAvatar(jsonObject.getString("figureurl_qq_2"));

                }else {

                	  // 用户头像

                    user.setAvatar(jsonObject.getString("figureurl_qq_1"));

                }

                json.put("success", true);

                json.put("msg", "success");

                json.put("user", user);

            } catch (Exception e) {

                int errorCode = jsonObject.getInteger("ret");

                String errorMsg = jsonObject.getString("msg");

                log.error("获取用户信息失败 errcode:{} errmsg:{}", errorCode, e.toString());

                json.put("success", false);

                json.put("msg", errorMsg);

                json.put("user", null);

            }

        }else {

        	  json.put("success", false);

              json.put("msg", "请先登录");

              json.put("user", null);

        }

        return json;

    }

}

QQAccessToken

package cn.zwqh.springboot.common.qq;

import java.io.Serializable;

public class QQAccessToken implements Serializable {

	/**

	 *

	 */

	private static final long serialVersionUID = 5258435811207021018L;

	private String accessToken;//接口调用凭证

	private int expiresIn;//access_token接口调用凭证超时时间，单位（秒）

	private String openid;//授权用户唯一标识

	private String refreshToken;//用户刷新access_token

	private String scope;//用户授权的作用域，使用逗号（,）分隔

	public String getOpenid() {

		return openid;

	}

	public void setOpenid(String openid) {

		this.openid = openid;

	}

	public String getAccessToken() {

		return accessToken;

	}

	public void setAccessToken(String accessToken) {

		this.accessToken = accessToken;

	}

	public int getExpiresIn() {

		return expiresIn;

	}

	public void setExpiresIn(int expiresIn) {

		this.expiresIn = expiresIn;

	}

	public String getRefreshToken() {

		return refreshToken;

	}

	public void setRefreshToken(String refreshToken) {

		this.refreshToken = refreshToken;

	}

	public String getScope() {

		return scope;

	}

	public void setScope(String scope) {

		this.scope = scope;

	}

}

2.2 Controller层实现

package cn.zwqh.springboot.action.web;

import java.io.IOException;

import java.util.Date;

import java.util.UUID;

import javax.annotation.Resource;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.stereotype.Controller;

import org.springframework.web.bind.annotation.GetMapping;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.ResponseBody;

import com.alibaba.fastjson.JSONObject;

import cn.zwqh.springboot.action.BaseAction;

import cn.zwqh.springboot.common.CookieUtil;

import cn.zwqh.springboot.common.DateUtil;

import cn.zwqh.springboot.common.EscapeUnescape;

import cn.zwqh.springboot.common.qq.QQAccessToken;

import cn.zwqh.springboot.common.qq.QQUtil;

import cn.zwqh.springboot.common.redis.RedisHandle;

import cn.zwqh.springboot.entity.SessionUser;

import cn.zwqh.springboot.entity.sys.User;

import cn.zwqh.springboot.service.UserService;

@Controller

@RequestMapping("/account")

public class AccountAction extends BaseAction {

	/**

	 *

	 */

	private static final long serialVersionUID = 1729415442021645693L;

	@Resource

	private RedisHandle redisHandle;

	@Autowired

	private UserService userService;

	/**

	 * 跳转至QQ登录界面

	 */

	@RequestMapping("/qqConnect")

	@ResponseBody

	public void qqConnect() {

		try {

			String referer = getRequest().getHeader("REFERER");

			String state = DateUtil.formatUserDefineDate(new Date(), "yyyyMMddHHmmssSSS");

			redisHandle.set(state, referer, 60 * 30L);

			getResponse().sendRedirect(QQUtil.getLoginConnectUrl(state));

		} catch (IOException e) {

			e.printStackTrace();

		}

	}

	/**

	 * QQ第三方登录

	 *

	 * @throws Exception

	 */

	@RequestMapping("/qqLogin")

	@ResponseBody

	public void qqLogin() throws Exception {

		String code = getRequest().getParameter("code");

		String state = getRequest().getParameter("state");

		System.out.println("code = " + code + ", state = " + state);

		if (code != null && !"".equals(code)) {

			QQAccessToken qqAccessToken = QQUtil.getQQLoginAccessToken(code);

			if (qqAccessToken.getAccessToken().equals("")) {

				// 我们的网站被CSRF攻击了或者用户取消了授权

				// 做一些数据统计工作

				System.out.print("没有获取到响应参数");

				// 跳转返回地址

				outJsonFailure("未获取到AccessToken，请重新进行QQ授权登录");

			} else {

				QQAccessToken qqAccessToken2 = QQUtil.refreshQQAccessToken(qqAccessToken.getRefreshToken());

				String accessToken = qqAccessToken2.getAccessToken();

				String referer = redisHandle.get(state).toString();

				redisHandle.set(accessToken, referer, 60 * 30L);

				redisHandle.remove(state);

				getResponse().sendRedirect("https://www.zwqh.top/account/getQQUserInfo?qqAccessToken=" + accessToken);

			}

		} else {

			outJsonFailure("缺少code参数");

		}

	}

	/**

	 * 获取QQ用户信息

	 *

	 * @param qqAccessToken

	 * @throws Exception

	 */

	@GetMapping("/getQQUserInfo")

	public String getQQUserInfo(String qqAccessToken) throws Exception {

		System.out.println("accessToken = " + qqAccessToken);

		String referer = redisHandle.get(qqAccessToken).toString();

		if (qqAccessToken != null && !"".equals(qqAccessToken)) {

			try {

				String qqOpenId = QQUtil.getQQOpenId(qqAccessToken);

				if (qqOpenId != null) {

					System.out.println("**************qq登录成功 qqOpenId = " + qqOpenId);

					// 获取QQ用户信息

					JSONObject object = QQUtil.getUserInfo(qqAccessToken, qqOpenId);

					// 数据库中判断qqOpenId是否存在，存在则登录，不存在则注册

					User user = userService.getUserByQQOpenId(qqOpenId);

					if (user != null) {

						user.setAvatar(object.getJSONObject("user").getString("avatar"));

						user.setNickname(object.getJSONObject("user").getString("nickname"));

						user.setLastLoginTime(DateUtil.formatDateTime(new Date()));

						userService.updateUser(user);

						SessionUser suser = SessionUser.getInstance(user);

						String token = UUID.randomUUID().toString();

						redisHandle.set(token, suser, 60 * 60L * 24 * 7);// 设置用户缓存及过期时间（一星期）

						JSONObject data = new JSONObject();

						data.put("userId", user.getId());

						data.put("nickname", user.getNickname());

						data.put("avatar", user.getAvatar());

						data.put("token", token);

						CookieUtil.setValue(getResponse(), "loginUser", data.toString());

					} else {

						user = new User();

						user.setAvatar(object.getJSONObject("user").getString("avatar"));

						user.setNickname(object.getJSONObject("user").getString("nickname"));

						user.setLastLoginTime(DateUtil.formatDateTime(new Date()));

						user.setRegisterTime(DateUtil.formatDateTime(new Date()));

						user.setQqId(qqOpenId);

						userService.insertUser(user);

						SessionUser suser = SessionUser.getInstance(user);

						String token = UUID.randomUUID().toString();

						redisHandle.set(token, suser, 60 * 60L * 24 * 7);// 设置用户缓存及过期时间（一星期）

						JSONObject data = new JSONObject();

						data.put("userId", user.getId());

						data.put("nickname", user.getNickname());

						data.put("avatar", user.getAvatar());

						data.put("token", token);

						CookieUtil.setValue(getResponse(), "loginUser", data.toString());

					}

				} else {

					putInRequest("error", "未获取到用户openid，请重新QQ授权登录");

				}

			} catch (Exception e) {

				e.printStackTrace();

				putInRequest("error", "登录异常");

			}

		} else {

			putInRequest("error", "缺少code参数");

		}

		return "redirect:" + referer;

	}

	/**

	 * 退出登录

	 * @return

	 */

	@RequestMapping("/logout")

	public String logout() {

		String referer = getRequest().getHeader("REFERER");

		String data= CookieUtil.getCookieValue(getRequest(), "loginUser");

		if(data!=null&&data!="") {

			JSONObject user=JSONObject.parseObject(EscapeUnescape.unescape(data));

			String token=user.getString("token");

			redisHandle.remove(token);

			CookieUtil.deleteValue("loginUser",getResponse());

		}

		return "redirect:" + referer;

	}

}

2.3 JavaScript 处理页面

var data=eval('('+unescape(getCookie("loginUser"))+')');

	var a = document.getElementsByClassName("blog-user")[0];

	if(data!=null){

		a.setAttribute("href","/account/logout");

		a.innerHTML='<img alt="'+data.nickname+'" title="'+data.nickname+'" src="'+data.avatar+'" class="layui-circle" width="40px" height="40px">';

	}else{

		a.setAttribute("href","/account/qqConnect");

		a.innerHTML='<i class="fa fa-qq"></i>';

	}

总结

总的来说QQ授权登录还是很简单的，该方法使用web端以及wap端。

非特殊说明，本文版权归朝雾轻寒所有，转载请注明出处.

本文标题： QQ第三方授权登录OAuth2.0实现（Java）

本文网址：https://www.zwqh.top/article/info/7

如果文章对您有帮助，请扫码关注下我的公众号，文章持续更新中...

码农公寓

准备材料

创建应用

程序开发

1. 添加QQ登录按钮，用于点击跳转至QQ授权登录页

2. Java后台实现页面跳转

2.1 编写一个工具类

2.2 Controller层实现

2.3 JavaScript 处理页面

总结

相关文章