Django之第三方平台QQ授权登录的实现（第三方qq登录接口异常）不要告诉别人

目录环境准备创建QQ互联应用创建应用模块定义QQ登录模型类执行迁移QQLoginTool库API使用说明QQ登录扫码页面认证获取openidopenid的判断处理openid是否绑定过用户openid已绑定用户openid未绑定用户openid签名处理openid绑定用户

python manage.py startapp oauth

INSTALLED_APPS=[
# ‘django.contrib.admin’,
‘django.contrib.auth’,
‘django.contrib.contenttypes’,
‘django.contrib.sessions’,
‘django.contrib.messages’,
‘django.contrib.staticfiles’,
‘apps.user’,
‘apps.oauth’,
]

url(r’^’, include(‘apps.oauth.urls’,namespace=’oauth’)),

from django.db import models
class OAuthQQUser():
“””QQ登录用户”””
user=models.ForeignKey(‘user.User’, on_delete=models.CASCADE, verbose_name=’用户’)
openid=models.CharField(max_length=64, verbose_name=’openid’, db_index=True)
create_time=models.DateTimeField(auto_now_add=True, verbose_name=”创建时间”)
update_time=models.DateTimeField(auto_now=True, verbose_name=”更新时间”)
class Meta:
db_table=’tb_oauth_qq’
verbose_name=’QQ登录用户’
verbose_name_plural=verbose_name

python manage.py makemigrations
python manage.py migrate

pip install QQLoginTool

from QQLoginTool.QQtool import OAuthQQ

oauth=OAuthQQ(client_id=settings.QQ_CLIENT_ID, client_secret=settings.QQ_CLIENT_SECRET, redirect_uri=settings.QQ_REDIRECT_URI, state=next)

login_url=oauth.get_qq_url()

access_token=oauth.get_access_token(code)

openid=oauth.get_open_id(access_token)

QQ_CLIENT_ID=’1020343878′
QQ_CLIENT_SECRET=’Yu4123456LG0Yw53o’
QQ_REDIRECT_URI=’https://abc.com/oauth/callback’

from django.urls import re_path
from . import views
urlpatterns=[
re_path(r’^qq/login/$’, views.QQAuthURLView.as_view()),
]

from QQLoginTool.QQtool import OAuthQQ
from django import http
from django.conf import settings
from django.views import View
from utils.response_code import RETCODE
“””
提供QQ登录页面网址
https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id=xxx&redirect_uri=xxx&state=xxx
“””
class QQAuthURLView(View):
def get(self, request):
# next: 从哪个页面进入到的登录页面，登录成功后自动回到那个页面
next=request.GET.get(‘next’)
# 获取QQ登录页面网址
oauth=OAuthQQ(client_id=settings.QQ_CLIENT_ID, client_secret=settings.QQ_CLIENT_SECRET,
redirect_uri=settings.QQ_REDIRECT_URI, state=next)
login_url=oauth.get_qq_url()
return http.JsonResponse({‘code’: 200 , ‘msg’: ‘OK’, ‘login_url’: login_url})

1.用户在QQ登录成功后，QQ会将用户重定向到配置的回调网址，同时会传递一个Authorization Code

2.拿到Authorization Code并完成OAuth2.0认证获取openid

from django.urls import re_path
from . import views
urlpatterns=[
re_path(r’^oauth/callback/$’, views.QQAuthUserView.as_view()),
]

“””用户扫码登录的回调处理”””
class QQAuthUserView(View):
def get(self, request):
“””Oauth2.0认证”””
# 提取code请求参数
code=request.GET.get(‘code’)
if not code:
return http.HttpResponseBadRequest(‘缺少code’)
# 创建oauth 对象
oauth=OAuthQQ(client_id=settings.QQ_CLIENT_ID, client_secret=settings.QQ_CLIENT_SECRET,
redirect_uri=settings.QQ_REDIRECT_URI)
try:
# 使用code向QQ服务器请求access_token
access_token=oauth.get_access_token(code)
# 使用access_token向QQ服务器请求openid
openid=oauth.get_open_id(access_token)
except Exception as e:
logger.error(e)
return http.HttpResponseServerError(‘OAuth2.0认证失败’)
pass

oauth_user=OAuthQQUser.objects.get(openid=openid)

try:
oauth_user=OAuthQQUser.objects.get(openid=openid)
except OAuthQQUser.DoesNotExist:
# 如果openid没绑定用户
pass
else:
# 如果openid已绑定用户,实现状态保持
qq_user=oauth_user.user
login(request, qq_user)
# 响应结果
next=request.GET.get(‘state’)
response=redirect(next)
# 登录时用户名写入到cookie，有效期15天
response.set_cookie(‘username’, qq_user.username, max_age=3600 * 24 * 15)
return response

try:
oauth_user=OAuthQQUser.objects.get(openid=openid)
except OAuthQQUser.DoesNotExist:
# 如果openid没绑定用户 generate_eccess_token：对openid签名
access_token=generate_eccess_token(openid)
context={‘access_token’: access_token}
return render(request, ‘oauthCallback.html’, context)
else:
qq_user=oauth_user.user
login(request, qq_user)
response=redirect(reverse(‘contents:index’))
response.set_cookie(‘username’, qq_user.username, max_age=3600 * 24 * 15)
return response

<input type=”hidden” name=”access_token” value=”{{ access_token }}”>

pip install itsdangerous

from itsdangerous import TimedJSONWebSignatureSerializer as Serializer
from django.conf import settings
# serializer=Serializer(秘钥, 有效期秒)
serializer=Serializer(settings.SECRET_KEY, 300)
# serializer.dumps(数据), 返回bytes类型
token=serializer.dumps({‘mobile’: ‘18381234567’})
token=token.decode()
# 检验token
# 验证失败，会抛出itsdangerous.BadData异常
serializer=Serializer(settings.SECRET_KEY, 300)
try:
data=serializer.loads(token)
except BadData:
return None

from itsdangerous import BadData
from itsdangerous import TimedJSONWebSignatureSerializer as Serializer
from django.conf import settings
def generate_eccess_token(openid):
“””
对openid签名
:param openid: 用户openid
“””
serializer=Serializer(settings.SECRET_KEY, expires_in=3600)
data={‘openid’: openid}
token=serializer.dumps(data)
return token.decode()
def check_access_token(access_token):
“””
提取openid
:param access_token: 签名后的openid
“””
serializer=Serializer(settings.SECRET_KEY, expires_in=3600)
try:
data=serializer.loads(access_token)
except BadData:
return None
else:
return data.get(‘openid’)

class QQAuthUserView(View):
“””用户扫码登录的回调处理”””
def get(self, request):
“””Oauth2.0认证”””
……
def post(self, request):
“””用户绑定openid”””
# 接收参数
mobile=request.POST.get(‘mobile’)
password=request.POST.get(‘password’)
sms_code_client=request.POST.get(‘sms_code’)
access_token=request.POST.get(‘access_token’)
# 判断参数是否齐全
if not all([mobile, password, sms_code_client]):
return http.HttpResponseBadRequest(‘缺少必传参数’)
# 判断手机号是否合法
if not re.match(r’^1[3-9]\d{9}$’, mobile):
return http.HttpResponseBadRequest(‘请输入正确的手机号码’)
# 判断密码是否合格
if not re.match(r’^[0-9A-Za-z]{8,20}$’, password):
return http.HttpResponseBadRequest(‘请输入8-20位的密码’)
# 判断短信验证码是否一致
redis_conn=get_redis_connection(‘code’)
sms_code_server=redis_conn.get(‘sms_%s’ % mobile)
if sms_code_server is None:
return render(request, ‘oauthCallback.html’, {‘msg’: ‘无效的短信验证码’})
if sms_code_client !=sms_code_server.decode():
return render(request, ‘oauthCallback.html’, {‘msg’: ‘输入短信验证码有误’})
# 判断openid是否有效
openid=check_access_token(access_token)
if not openid:
return render(request, ‘oauthCallback.html’, {‘msg’: ‘无效的openid’})
# 保存注册数据
try:
user=User.objects.get(mobile=mobile)
except User.DoesNotExist:
# 用户不存在,新建用户
user=User.objects.create_user(username=mobile, password=password, mobile=mobile)
else:
# 如果用户存在，检查用户密码
if not user.check_password(password):
return render(request, ‘oauthCallback.html’, {‘msg’: ‘用户名或密码错误’})
# 将用户绑定openid
try:
OAuthQQUser.objects.create(openid=openid, user=user)
except DatabaseError:
return render(request, ‘oauthCallback.html’, {‘msg’: ‘QQ登录失败’})
# 实现状态保持
login(request, user)
# 响应绑定结果
next=request.GET.get(‘state’)
response=redirect(next)
# 登录时用户名写入到cookie，有效期15天
response.set_cookie(‘username’, user.username, max_age=3600 * 24 * 15)
return response

您可能感兴趣的文章:django 微信网页授权认证api的步骤详解django 微信网页授权登陆的实现