原生PHP实现支付宝App第三方登录获取用户信息

App 项目要求实现第三方 微信 和 支付宝 登录，微信可以直接在 App 端完成认证拿到用户信息，支付宝则需要后端获取。

流程

1、服务端先拿到 App 端 调用 支付宝 SDK 所需要的 infoStr

2、App 端 通过 infoStr 获得用户 授权 code

3、服务端通过 授权 code 拿到请求 token

4、服务端通过 token 获得用户信息

代码

在这之前，支付宝接口对接流程你应该有所了解。

1、创建 RSA2 方法：获得 sign：

/**
 * enRSA2 RSA加密
 * 
 * @param String $data
 * @return String
 */
private function enRSA2($data)
{
    $str = chunk_split(trim($this->private_key), 64, "\n");
    $key = "-----BEGIN RSA PRIVATE KEY-----\n$str-----END RSA PRIVATE KEY-----\n";
    // $key = file_get_contents(storage_path(&＃39;rsa_private_key.pem&＃39;)); 为文件时这样引入
    $signature = &＃39;&＃39;;
    $signature = openssl_sign($data, $signature, $key, OPENSSL_ALGO_SHA256)?base64_encode($signature):NULL;
    return $signature;
}

2、创建一个 Get 参数拼接方法，保证符合支付宝加签字符串要求：

/**
 * myHttpBuildQuery
 * 之所以不用 自带函数 `http_build_query` 
 * 是因为格式化的时间带有  ‘:’  会被转换成十六进制 utf-8 码
 * 
 * @param Array
 * @return String
 */
private function myHttpBuildQuery($dataArr)
{
    ksort($dataArr);
    $signStr = &＃39;&＃39;;
    foreach ($dataArr as $key => $val) {
        if (empty($signStr)) {
            $signStr = $key.&＃39;=&＃39;.$val;
        } else {
            $signStr .= &＃39;&&＃39;.$key.&＃39;=&＃39;.$val;
        }
    }
    return $signStr;  
}

3、给到 APP 端需要的 infoStr:

/**
 * InfoStr APP登录需要的的infostr
 * 
 * @return String
 */
public function infoStr()
{
    $infoStr = http_build_query([
        &＃39;apiname&＃39; => &＃39;com.alipay.account.auth&＃39;,
        &＃39;method&＃39; => &＃39;alipay.open.auth.sdk.code.get&＃39;,
        &＃39;app_id&＃39; => $this->app_id,
        &＃39;app_name&＃39; => &＃39;mc&＃39;,
        &＃39;biz_type&＃39; => &＃39;openservice&＃39;,
        &＃39;pid&＃39; => $this->pid,
        &＃39;product_id&＃39; => &＃39;APP_FAST_LOGIN&＃39;,
        &＃39;scope&＃39; => &＃39;kuaijie&＃39;,
        &＃39;target_id&＃39; => mt_rand(999, 99999), //商户标识该次用户授权请求的ID，该值在商户端应保持唯一
        &＃39;auth_type&＃39; => &＃39;AUTHACCOUNT&＃39;, // AUTHACCOUNT代表授权；LOGIN代表登录
        &＃39;sign_type&＃39; => &＃39;RSA2&＃39;,
    ]);
    $infoStr .= &＃39;&sign=&＃39;.$this->enRSA2($infoStr);
    return $infoStr;
}

4、拿到用户信息：

 /**
     * AlipayToken 获得用户 请求token, 通过它获得 用户信息
     * 
     * 需要按照支付宝加签流程来。
     */
    public function userInfo($app_auth_token)
    {
        $infoArr = [
            &＃39;method&＃39; => &＃39;alipay.system.oauth.token&＃39;,
            &＃39;app_id&＃39; => $this->app_id,
            &＃39;charset&＃39; => &＃39;utf-8&＃39;,
            &＃39;sign_type&＃39; => &＃39;RSA2&＃39;,
            &＃39;timestamp&＃39; => date(&＃39;Y-m-d H:i:s&＃39;),
            &＃39;version&＃39; => &＃39;1.0&＃39;,
            &＃39;code&＃39; => $app_auth_token,
            &＃39;grant_type&＃39; => &＃39;authorization_code&＃39;,
        ];
        $signStr = $this->myHttpBuildQuery($infoArr);
        $sign = urlencode($this->enRSA2($signStr));
        $qureStr = $signStr.&＃39;&sign=&＃39;.$sign;
        $res = new Client();
        $body = $res->get(&＃39;https://openapi.alipay.com/gateway.do?&＃39;.$qureStr)->getBody()->getContents();
        $body = json_decode($body);
        if (!isset($body->alipay_system_oauth_token_response->access_token)) {
            return &＃39;接口异常&＃39;;
        } else {
            $autho_token = $body->alipay_system_oauth_token_response->access_token;
            $userinfo = $this->aliPayUserInfo($autho_token);
            return $userinfo; // 或则 返回 json_encode($userinfo) 根据实际需求来 
        }
    }
    /**
     * AliPayUserInfo 通过 token 获取用户信息
     */
    private function aliPayUserInfo($autho_token)
    {
        $infoArr = [
            &＃39;method&＃39; => &＃39;alipay.user.info.share&＃39;,
            &＃39;app_id&＃39; => $this->app_id,
            &＃39;charset&＃39; => &＃39;utf-8&＃39;,
            &＃39;sign_type&＃39; => &＃39;RSA2&＃39;,
            &＃39;timestamp&＃39; => date(&＃39;Y-m-d H:i:s&＃39;),
            &＃39;version&＃39; => &＃39;1.0&＃39;,
            &＃39;auth_token&＃39; => $autho_token,
        ];
        $signStr = $this->myHttpBuildQuery($infoArr);
        $sign = urlencode($this->enRSA2($signStr));
        $qureStr = $signStr.&＃39;&sign=&＃39;.$sign;
        $res = new Client();
        $body = $res->get(&＃39;https://openapi.alipay.com/gateway.do?&＃39;.$qureStr)->getBody()->getContents();
        $body = json_decode($body);
        if (!isset($body->alipay_user_info_share_response)) {
            return &＃39;接口异常&＃39;;
        }
        $body = $body->alipay_user_info_share_response;
        return $body;
    }

代码总览

 &＃39;com.alipay.account.auth&＃39;,
            &＃39;method&＃39; => &＃39;alipay.open.auth.sdk.code.get&＃39;,
            &＃39;app_id&＃39; => $this->app_id,
            &＃39;app_name&＃39; => &＃39;mc&＃39;,
            &＃39;biz_type&＃39; => &＃39;openservice&＃39;,
            &＃39;pid&＃39; => $this->pid,
            &＃39;product_id&＃39; => &＃39;APP_FAST_LOGIN&＃39;,
            &＃39;scope&＃39; => &＃39;kuaijie&＃39;,
            &＃39;target_id&＃39; => mt_rand(999, 99999), //商户标识该次用户授权请求的ID，该值在商户端应保持唯一
            &＃39;auth_type&＃39; => &＃39;AUTHACCOUNT&＃39;, // AUTHACCOUNT代表授权；LOGIN代表登录
            &＃39;sign_type&＃39; => &＃39;RSA2&＃39;,
        ]);
        $infoStr .= &＃39;&sign=&＃39;.$this->enRSA2($infoStr);
        return $infoStr;
    }
     /**
     * AlipayToken 获得用户 请求token, 通过它获得 用户信息
     * 
     * 需要按照支付宝加签流程来。
     */
    public function userInfo($app_auth_token)
    {
        $infoArr = [
            &＃39;method&＃39; => &＃39;alipay.system.oauth.token&＃39;,
            &＃39;app_id&＃39; => $this->app_id,
            &＃39;charset&＃39; => &＃39;utf-8&＃39;,
            &＃39;sign_type&＃39; => &＃39;RSA2&＃39;,
            &＃39;timestamp&＃39; => date(&＃39;Y-m-d H:i:s&＃39;),
            &＃39;version&＃39; => &＃39;1.0&＃39;,
            &＃39;code&＃39; => $app_auth_token,
            &＃39;grant_type&＃39; => &＃39;authorization_code&＃39;,
        ];
        $signStr = $this->myHttpBuildQuery($infoArr);
        $sign = urlencode($this->enRSA2($signStr));
        $qureStr = $signStr.&＃39;&sign=&＃39;.$sign;
        $res = new Client();
        $body = $res->get(&＃39;https://openapi.alipay.com/gateway.do?&＃39;.$qureStr)->getBody()->getContents();
        $body = json_decode($body);
        if (!isset($body->alipay_system_oauth_token_response->access_token)) {
            return &＃39;接口异常&＃39;;
        } else {
            $autho_token = $body->alipay_system_oauth_token_response->access_token;
            $userinfo = $this->aliPayUserInfo($autho_token);
            return $userinfo; // 或则 返回 json_encode($userinfo) 根据实际需求来 
        }
    }
    /**
     * AliPayUserInfo 通过 token 获取用户信息
     */
    private function aliPayUserInfo($autho_token)
    {
        $infoArr = [
            &＃39;method&＃39; => &＃39;alipay.user.info.share&＃39;,
            &＃39;app_id&＃39; => $this->app_id,
            &＃39;charset&＃39; => &＃39;utf-8&＃39;,
            &＃39;sign_type&＃39; => &＃39;RSA2&＃39;,
            &＃39;timestamp&＃39; => date(&＃39;Y-m-d H:i:s&＃39;),
            &＃39;version&＃39; => &＃39;1.0&＃39;,
            &＃39;auth_token&＃39; => $autho_token,
        ];
        $signStr = $this->myHttpBuildQuery($infoArr);
        $sign = urlencode($this->enRSA2($signStr));
        $qureStr = $signStr.&＃39;&sign=&＃39;.$sign;
        $res = new Client();
        $body = $res->get(&＃39;https://openapi.alipay.com/gateway.do?&＃39;.$qureStr)->getBody()->getContents();
        $body = json_decode($body);
        if (!isset($body->alipay_user_info_share_response)) {
            return &＃39;接口异常&＃39;;
        }
        $body = $body->alipay_user_info_share_response;
        return $body;
    }
    /**
     * enRSA2 RSA加密
     * 
     * @param String $data
     * @return String
     */
    private function enRSA2($data)
    {
        $str = chunk_split(trim($this->private_key), 64, "\n");
        $key = "-----BEGIN RSA PRIVATE KEY-----\n$str-----END RSA PRIVATE KEY-----\n";
        // $key = file_get_contents(storage_path(&＃39;rsa_private_key.pem&＃39;)); 为文件时这样引入
        $signature = &＃39;&＃39;;
        $signature = openssl_sign($data, $signature, $key, OPENSSL_ALGO_SHA256)?base64_encode($signature):NULL;
        return $signature;
    }
    /**
     * myHttpBuildQuery 返回一个 http Get 传参数组
     * 之所以不用 自带函数 http_build_query 时间带 ‘:’ 会被转换
     * 
     * @param Array
     * @return String
     */
    private function myHttpBuildQuery($dataArr)
    {
        ksort($dataArr);
        $signStr = &＃39;&＃39;;
        foreach ($dataArr as $key => $val) {
            if (empty($signStr)) {
                $signStr = $key.&＃39;=&＃39;.$val;
            } else {
                $signStr .= &＃39;&&＃39;.$key.&＃39;=&＃39;.$val;
            }
        }
        return $signStr;  
    }
}

其它

1.注意：这份代码是从原有项目扒出来，主要是为有此需求的开发人员提供参考，并未测试是否能直接使用，请自行测试。

2.之所以不用支付宝 php_SDK，是因为需求有限：只获取用户的信息，没必要。

3.代码有不合理的地方还请提出来，大家互相学习。

以上就是原生 PHP 实现支付宝 App 第三方登录获取用户信息的详细内容，更多请关注 第一PHP社区 其它相关文章！