小程序授权

<?php
namespace app\index\controller;

use \think\Controller;
use \think\Db;
class Index extends Controller
{
    public function index()
    {
      return $this->fetch();
    }

    public function testGet(){
        $get = $this->request->get();
        return json($get);
    }
    public function testPost(){
        $post = $this->request->post();
        return json($post);
    }
    //获取文章详情
    public function listarticle(){
        $post = $this->request->post();
        if($post["type"]){
             $data = Db::name("article")->where("type",$post["type"])->field("id,title,content")->find();
             if($data){
                 return_msg(200,"获取成功",$data);
             }else{
                 return_msg(200,"没有此数据");
             }
        }else{
            return_error("参数有误");
        }
    }
    
    
    
    
    
    
    
    
    
    //授权登录
    
    
     public function actionAuthwr(){
        //$get = $_REQUEST;
        $post = $this->request->post();
         $param['appid'] = 'wx1bd4a3d6b0f91a52';    //小程序id
         $param['secret'] = '5b7a7b78cc48ff8cb12a2516172ee693';    //小程序密钥
         $param['js_code'] = $this->define_str_replace($post['code']);
         $param['grant_type'] = 'authorization_code';
         $aid = $param['appid'];
         $st = $param['secret'];
         $ce = $param['js_code'];
         $ty = $param['grant_type'];
         $http_key =$this->httpGet("https://api.weixin.qq.com/sns/jscode2session?"."appid=".$aid."&secret=".$st."&js_code=".$ce."&grant_type=".$ty);
        $session_key = json_decode($http_key,true);
            $fp = fopen('sessionkey.txt', 'a+b');
            fwrite($fp, var_export($session_key, true));
            fclose($fp);
            
            
        if (!empty($session_key['session_key'])) {
            $decodeData    = $this->decryptData($param['appid'],$session_key['session_key'],$post["encryptedData"],$post["iv"]);
            $zh_data = json_decode($decodeData, true);

            if($zh_data == "-41003"){
                return_error("授权失败"); 
            }
        //    $is_member = Member::find()->where(array("openid"=>$session_key["openid"]))->asArray()->one();
            
            $is_member = Db::name("member")->where(array("openid"=>$session_key["openid"]))->find();
            if($is_member){
                $token = $this->generate_token($session_key["openid"]);
                $token_extime = strtotime("+1 month");
               // $result = Member::updateAll(["nickname"=>$zh_data["nickName"],"token"=>$token,"token_extime"=>$token_extime,"avatar_path"=>$zh_data["avatarUrl"]],["id"=>$is_member["id"]]);
                $result = Db::name("member")->where(["id"=>$is_member["id"]])->update(["nickname"=>$zh_data["nickName"],"token"=>$token,"token_extime"=>$token_extime,"avatar_path"=>$zh_data["avatarUrl"]]);
                
                if($result){
                $return["nickname"] = $zh_data["nickName"];
                $return["uid"] = $is_member["id"];
                $return["openid"] =  $session_key["openid"];
                $return["avatar_path"] = $zh_data["avatarUrl"];
                $return["token"] = $token;
                     return_msg("200","授权成功",$return);
                }else{
                     return_error("授权失败1"); 
                }
            }else{
                //则新增
                
                $Member['openid'] = $session_key["openid"];
                $Member['nickname'] = $zh_data["nickName"];
                // $Member->p_id = $get["incode"];
                //$Member->name = $zh_data["nickName"];
                $Member['avatar_path'] = $zh_data["avatarUrl"];
                $Member['login_time'] = time();
                //$Member->addtime = date('Y-m-d H:i:s');
                $Member['token'] = $this->generate_token($session_key["openid"]);
                $Member['token_extime'] = strtotime("+1 month");
                
                $id = Db::name("member")->insertGetId($Member);
                if($id){
                    $return["nickname"] = $zh_data["nickName"];
                    $return["uid"] = $id;
                    $return["openid"] =  $zh_data["openId"];
                    $return["avatar_path"] = $zh_data["avatarUrl"];
                    $return["token"] = $Member['token'];
                    return_msg("200","授权成功",$return);
                }else{
                    return_error("授权失败2"); 
                }
            }
            
        }else{
            return_error("授权失败3");
        }
    }
    public function generate_token($phone){
        $encryption_token = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz'.time().$phone;
        return md5($encryption_token);
    }
    public function define_str_replace($data)
    {
        return str_replace(' ','+',$data);
    }
    public function httpGet($url) {
        $curl = curl_init();
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($curl, CURLOPT_TIMEOUT, 500);
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
        curl_setopt($curl, CURLOPT_URL, $url);
        $res = curl_exec($curl);
        curl_close($curl);
        return $res;
  }
  public function decryptData( $appid , $sessionKey, $encryptedData, $iv ){
        $OK = 0;
        $IllegalAesKey = -41001;
        $IllegalIv = -41002;
        $IllegalBuffer = -41003;
        $DecodeBase64Error = -41004;
     
        if (strlen($sessionKey) != 24) {
            return $IllegalAesKey;
                                          $fp = fopen('d69.txt', 'a+b');
                fwrite($fp, var_export($IllegalAesKey, true));
                fclose($fp);
        }
        $aesKey=base64_decode($sessionKey);
     
        if (strlen($iv) != 24) {
            
                  $fp = fopen('d69.txt', 'a+b');
                fwrite($fp, var_export($IllegalIv, true));
                fclose($fp);
            
            return $IllegalIv;
        }
        $aesIV=base64_decode($iv);
     
        $aesCipher=base64_decode($encryptedData);
    //$aesCipher=$encryptedData;
        $result=openssl_decrypt( $aesCipher, "AES-128-CBC", $aesKey, 1, $aesIV);
        $dataObj=json_decode( $result );
                     $fp = fopen('d691.txt', 'a+b');
                fwrite($fp, var_export($result, true));
                fclose($fp);
                
                                     $fp = fopen('d693.txt', 'a+b');
                fwrite($fp, var_export($dataObj, true));
                fclose($fp);
        
        if( $dataObj  == NULL )
        {
             $fp = fopen('d69.txt', 'a+b');
                fwrite($fp, var_export($IllegalBuffer, true));
                fclose($fp);
            return $IllegalBuffer;
        }
        if( $dataObj->watermark->appid != $appid )
        {
                                                     $fp = fopen('d69.txt', 'a+b');
                fwrite($fp, var_export($DecodeBase64Error, true));
                fclose($fp);
            return $DecodeBase64Error;
        }
                $fp = fopen('d69.txt', 'a+b');
                fwrite($fp, var_export($result, true));
                fclose($fp);
        $data = json_decode($result,true);
     
        return $result;
    }
    // 获取openid和access_token
    public function sq(){
        header("Content-type:text/html;charset=utf-8");
        $code = input('code');
        if(empty($code)){
            return_error('获取失败，code不存在，请联系管理员');
        }
        $appid = 'wx1bd4a3d6b0f91a52';//小程序的appid
        $appSecret = '5b7a7b78cc48ff8cb12a2516172ee693';// 小程序的$appSecret
        $wxUrl = 'https://api.weixin.qq.com/sns/jscode2session?appid=%s&secret=%s&js_code=%s&grant_type=authorization_code';
        $getUrl = sprintf($wxUrl, $appid, $appSecret, $code);//把appid，appsecret，code拼接到url里
        //发起请求
        $getopenid = file_get_contents($getUrl);
         
        $getopenid_arr = json_decode($getopenid, true);
        
        return_msg(200,'获取成功',$getopenid_arr);
    }
    
    
    
    //授权用户手机号
    public function wxtel()
    {
 
        $code = input('post.code');
        $encryptedData =input('post.encryptedData');
        $iv = input('post.iv');
  
        /**
         * 获取用户的openID和session_key
         */
        $appid='wx1bd4a3d6b0f91a52';
        $secret='5b7a7b78cc48ff8cb12a2516172ee693';
        $url = "https://api.weixin.qq.com/sns/jscode2session?appid=$appid&secret=$secret&js_code=$code&grant_type=authorization_code";
        $ch = curl_init();
        $timeout = 5;
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
        $contents = curl_exec($ch);
        curl_close($ch);
        $info = json_decode($contents,true);

        /**
         * 获取加密电话数据
         */
        $openid = $info['openid'];
        $sessionKey = $info['session_key'];
 
        $errCode = $this->decryptData2($appid,$sessionKey,$encryptedData, $iv, $data );
//        dump($data);die;
//        if ($errCode == 0) {

        $data = json_encode($data);
        $data = json_decode($data, true);
//        print_r($data);die;
        $a = Db::name('member')->where('openid',$openid)->where('mobile',$data['phoneNumber'])->find();
        if ($a){
            return_msg(200,'查询成功',$a['phone']);
        }
        $a = Db::name('member')->where('openid',$openid)->update(['mobile'=>$data['phoneNumber']]);
        if ($a){
            return_msg(200,'操作成功',$data['phoneNumber']);
        }else{
            return_error('操作失败');
        }
    }
    
    /**
     * 检验数据的真实性，并且获取解密后的明文.
     * @param $encryptedData string 加密的用户数据
     * @param $iv string 与用户数据一同返回的初始向量
     * @param $data string 解密后的原文
     *
     * @return int 成功0，失败返回对应的错误码
     */
    public function decryptData2( $appid,$sessionKey,$encryptedData, $iv, &$data )
    {
        if (strlen($sessionKey) != 24) {
            return -41001;
        }
        $aesKey=base64_decode($sessionKey);
    
    
        if (strlen($iv) != 24) {
            return -41002;
        }
        $aesIV=base64_decode($iv);
    
        $aesCipher=base64_decode($encryptedData);
    
        $result=openssl_decrypt( $aesCipher, "AES-128-CBC", $aesKey, 1, $aesIV);
    
        $dataObj=json_decode( $result );
        if( $dataObj  == NULL )
        {
            return -41003;
        }
        if( $dataObj->watermark->appid != $appid )
        {
            return -41004;
        }
        $data = $dataObj;
        return 0;
    }
 
 
}