PHP实现QQ快速登录的方法

//Step1：获取Authorization Code
session_start();
$code = $_REQUEST["code"];//存放Authorization Code
if(empty($code))
{
//state参数用于防止CSRF攻击，成功授权后回调时会原样带回
$_SESSION['state'] = md5(uniqid(rand(),TRUE));
//拼接URL
$dialog_url = "https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id="
. $app_id . "&redirect_uri=" . urlencode($my_url) . "&state="
. $_SESSION['state'];
echo("");
}

//Step2：通过Authorization Code获取Access Token
if($_REQUEST['state'] == $_SESSION['state'] || 1)
{
//拼接URL
$token_url = "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&"
. "client_id=" . $app_id . "&redirect_uri=" . urlencode($my_url)
. "&client_secret=" . $app_secret . "&code=" . $code;
$response = file_get_contents($token_url);
if (strpos($response,"callback") !== false)//如果登录用户临时改变主意取消了，返回true!==false,否则执行step3
{
$lpos = strpos($response,"(");
$rpos = strrpos($response,")");
$response = substr($response,$lpos + 1,$rpos - $lpos -1);
$msg = json_decode($response);
if (isset($msg->error))
{
echo "

error:

" . $msg->error;
echo "

msg :

" . $msg->error_description;
exit;
}
}

//Step3：使用Access Token来获取用户的OpenID 
$params = array(); 
parse_str($response,$params);//把传回来的数据参数变量化 
$graph_url = "https://graph.qq.com/oauth2.0/me?access_token=".$params['access_token']; 
$str = file_get_contents($graph_url); 
if (strpos($str,"callback") !== false) 
{ 
 $lpos = strpos($str,"("); 
 $rpos = strrpos($str,")"); 
 $str = substr($str,$rpos - $lpos -1); 
} 
$user = json_decode($str);//存放返回的数据 client_id ，openid 
if (isset($user->error)) 
{ 
 echo "<h3>error:</h3>" . $user->error; 
 echo "<h3>msg :</h3>" . $user->error_description; 
 exit; 
} 
//echo("Hello " . $user->openid); 
//echo("Hello " . $params['access_token']); 

//Step4：使用<span style="font-family: Arial,Helvetica,sans-serif;"&gt;openid,</span><span style="font-family: Arial,sans-serif;"&gt;access_token来获取所接受的用户信息。</span> 
$user_data_url = "https://graph.qq.com/user/get_user_info?access_token={$params['access_token']}&oauth_consumer_key={$app_id}&openid={$user->openid}&format=json"; 

$user_data = file_get_contents($user_data_url);//此为获取到的user信息 
} 
else 
{ 
 echo("The state does not match. You may be a victim of CSRF."); 
} 

qq_login(); //调用登录方法，向腾讯发出快速登录请求

qq_callback();get_openid();get_user_info();

session_start();
define('APPID','XXXX'); //appid
define('APPKEY','XXXX'); //appkey
define('CALLBACK','XXXX'); //回调地址
define('SCOPE','get_user_info,list_album,add_album,upload_pic,add_topic,add_weibo'); //授权接口列表
class QQ_LoginAction {
const GET_AUTH_CODE_URL = "https://graph.qq.com/oauth2.0/authorize";
const GET_ACCESS_TOKEN_URL = "https://graph.qq.com/oauth2.0/token";
const GET_OPENID_URL = "https://graph.qq.com/oauth2.0/me";
private $APIMap = array(
"get_user_info" => array( //获取用户资料
"https://graph.qq.com/user/get_user_info",array("format" => "json"),),"add_t" => array( //发布一条普通微博
"https://graph.qq.com/t/add_t",array("format" => "json","content","#clientip","#longitude","#latitude","#compatibleflag"),"POST"
),"add_pic_t" => array( //发布一条图片微博
"https://graph.qq.com/t/add_pic_t",array("content","pic","format" => "json","#syncflag","#compatiblefalg"),"del_t" => array( //删除一条微博
"https://graph.qq.com/t/del_t",array("id","format" => "json"),"get_repost_list" => array( //获取单条微博的转发或点评列表
"https://graph.qq.com/t/get_repost_list",array("flag","rootid","pageflag","pagetime","reqnum","twitterid","format" => "json")
),"get_info" => array( //获取当前用户资料
"https://graph.qq.com/user/get_info",array("format" => "json")
),"get_other_info" => array( //获取其他用户资料
"https://graph.qq.com/user/get_other_info","#name-1","#fopenid-1")
),"get_fanslist" => array(
"https://graph.qq.com/relation/get_fanslist",//我的微博粉丝列表
array("format" => "json","startindex","#mode","#install","#sex")
),"get_idollist" => array(
"https://graph.qq.com/relation/get_idollist",//我的微博收听列表
array("format" => "json","#install")
),"add_idol" => array(
"https://graph.qq.com/relation/add_idol",//微博收听某用户
array("format" => "json","#fopenids-1"),"del_idol" => array( //微博取消收听某用户
"https://graph.qq.com/relation/del_idol","#fopenid-1"),"POST"
)
);
private $keysArr;
function __construct(){
if($_SESSION["openid"]){
$this->keysArr = array(
"oauth_consumer_key" => APPID,"access_token" => $_SESSION['access_token'],"openid" => $_SESSION["openid"]
);
}else{
$this->keysArr = array(
"oauth_consumer_key" => APPID
);
}
}
public function qq_login(){
//-------生成唯一随机串防CSRF攻击
$_SESSION['state'] = md5(uniqid(rand(),TRUE));
$keysArr = array(
"response_type" => "code","client_id" => APPID,"redirect_uri" => CALLBACK,"state" => $_SESSION['state'],"scope" => SCOPE
);
$login_url = self::GET_AUTH_CODE_URL.'?'.http_build_query($keysArr);
header("Location:$login_url");
}
public function qq_callback(){
//--------验证state防止CSRF攻击
if($_GET['state'] != $_SESSION['state']){
return false;
}
//-------请求参数列表
$keysArr = array(
"grant_type" => "authorization_code","client_secret" => APPKEY,"code" => $_GET['code']
);
//------构造请求access_token的url
$token_url = self::GET_ACCESS_TOKEN_URL.'?'.http_build_query($keysArr);
$response = $this->get_contents($token_url);
if(strpos($response,"callback") !== false){
$lpos = strpos($response,"(");
$rpos = strrpos($response,")");
$response = substr($response,$rpos - $lpos -1);
$msg = json_decode($response);
if(isset($msg->error)){
$this->showError($msg->error,$msg->error_description);
}
}
$params = array();
parse_str($response,$params);
$_SESSION["access_token"]=$params["access_token"];
$this->keysArr['access_token']=$params['access_token'];
return $params["access_token"];
}

public function get_contents($url){
if (ini_get("allow_url_fopen") == "1") {
$response = file_get_contents($url);
}else{
$ch = curl_init();
curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,FALSE);
curl_setopt($ch,CURLOPT_RETURNTRANSFER,TRUE);
curl_setopt($ch,CURLOPT_URL,$url);
$response = curl_exec($ch);
curl_close($ch);
}
if(empty($response)){
return false;
}
return $response;
}
public function get_openid(){
//-------请求参数列表
$keysArr = array(
"access_token" => $_SESSION["access_token"]
);
$graph_url = self::GET_OPENID_URL.'?'.http_build_query($keysArr);
$response = $this->get_contents($graph_url);
//--------检测错误是否发生
if(strpos($response,$rpos - $lpos -1);
}
$user = json_decode($response);
if(isset($user->error)){
$this->showError($user->error,$user->error_description);
}
//------记录openid
$_SESSION['openid']=$user->openid;
$this->keysArr['openid']=$user->openid;
return $user->openid;
}

/**

• showError
• 显示错误信息
• @param int $code 错误代码
• @param string $description 描述信息（可选）
  */
  public function showError($code,$description = '$'){
  echo "<meta charset="UTF-8">";
  echo "

  error:

  $code";
  echo "

  msg :

  $description";
  exit();
  }

/**

• _call
• 魔术方法，做api调用转发
• @param string $name 调用的方法名称
• @param array $arg 参数列表数组
• @since 5.0
• @return array 返加调用结果数组
  */
  public function __call($name,$arg){
  //如果APIMap不存在相应的api
  if(empty($this->APIMap[$name])){
  $this->showError("api调用名称错误","不存在的API: $name");
  }
  //从APIMap获取api相应参数
  $baseUrl = $this->APIMap[$name][0];
  $argsList = $this->APIMap[$name][1];
  $method = isset($this->APIMap[$name][2]) ? $this->APIMap[$name][2] : "GET";
  if(empty($arg)){
  $arg[0] = null;
  }
  $responseArr = json_decode($this->_applyAPI($arg[0],$argsList,$baseUrl,$method),true);
  //检查返回ret判断api是否成功调用
  if($responseArr['ret'] == 0){
  return $responseArr;
  }else{
  $this->showError($responseArr['ret'],$responseArr['msg']);
  }
  }

//调用相应api
private function _applyAPI($arr,$method){
$pre = "#";
$keysArr = $this->keysArr;
$optionArgList = array();//一些多项选填参数必选一的情形
foreach($argsList as $key => $val){
$tmpKey = $key;
$tmpVal = $val;
if(!is_string($key)){
$tmpKey = $val;
if(strpos($val,$pre) === 0){
$tmpVal = $pre;
$tmpKey = substr($tmpKey,1);
if(preg_match("/-(d$)/",$tmpKey,$res)){
$tmpKey = str_replace($res[0],"",$tmpKey);
$optionArgList[]= $tmpKey;
}
}else{
$tmpVal = null;
}
}
//-----如果没有设置相应的参数
if(!isset($arr[$tmpKey]) || $arr[$tmpKey] === ""){
if($tmpVal == $pre){
continue;
}else if($tmpVal){//则使用默认的值
$arr[$tmpKey] = $tmpVal;
}else{
$this->showError("api调用参数错误","未传入参数$tmpKey");
}
}
$keysArr[$tmpKey] = $arr[$tmpKey];
}
//检查选填参数必填一的情形
if(count($optionArgList)!=0){
$n = 0;
foreach($optionArgList as $val){
if(in_array($val,array_keys($keysArr))){
$n++;
}
}
if(!$n){
$str = implode(",",$optionArgList);
$this->showError("api调用参数错误",$str."必填一个");
}
}
if($method == "POST"){
$response = $this->post($baseUrl,$keysArr,0);
}else if($method == "GET"){
$baseUrl=$baseUrl.'?'.http_build_query($keysArr);
$response = $this->get_contents($baseUrl);
}
return $response;
}

public function post($url,$flag = 0){
$ch = curl_init();
if(! $flag) curl_setopt($ch,FALSE);
curl_setopt($ch,TRUE);
curl_setopt($ch,CURLOPT_POST,CURLOPT_POSTFIELDS,$keysArr);
curl_setopt($ch,$url);
$ret = curl_exec($ch);
curl_close($ch);
return $ret;
}
}