mirror of
https://gitee.com/yadong.zhang/JustAuth.git
synced 2026-01-07 19:31:48 +08:00
96 lines
3.3 KiB
Java
96 lines
3.3 KiB
Java
package me.zhyd.oauth.request;
|
||
|
||
import cn.hutool.http.HttpRequest;
|
||
import cn.hutool.http.HttpResponse;
|
||
import com.alibaba.fastjson.JSON;
|
||
import com.alibaba.fastjson.JSONObject;
|
||
import me.zhyd.oauth.config.AuthConfig;
|
||
import me.zhyd.oauth.config.AuthSource;
|
||
import me.zhyd.oauth.enums.AuthUserGender;
|
||
import me.zhyd.oauth.exception.AuthException;
|
||
import me.zhyd.oauth.model.AuthCallback;
|
||
import me.zhyd.oauth.model.AuthToken;
|
||
import me.zhyd.oauth.model.AuthUser;
|
||
import me.zhyd.oauth.utils.GlobalAuthUtil;
|
||
import me.zhyd.oauth.utils.UrlBuilder;
|
||
|
||
/**
|
||
* 钉钉登录
|
||
*
|
||
* @author yadong.zhang (yadong.zhang0415(a)gmail.com)
|
||
* @since 1.8
|
||
*/
|
||
public class AuthDingTalkRequest extends AuthDefaultRequest {
|
||
|
||
public AuthDingTalkRequest(AuthConfig config) {
|
||
super(config, AuthSource.DINGTALK);
|
||
}
|
||
|
||
@Override
|
||
protected AuthToken getAccessToken(AuthCallback authCallback) {
|
||
return AuthToken.builder().accessCode(authCallback.getCode()).build();
|
||
}
|
||
|
||
@Override
|
||
protected AuthUser getUserInfo(AuthToken authToken) {
|
||
String code = authToken.getAccessCode();
|
||
JSONObject param = new JSONObject();
|
||
param.put("tmp_auth_code", code);
|
||
HttpResponse response = HttpRequest.post(userInfoUrl(authToken)).body(param.toJSONString()).execute();
|
||
JSONObject object = JSON.parseObject(response.body());
|
||
if (object.getIntValue("errcode") != 0) {
|
||
throw new AuthException(object.getString("errmsg"));
|
||
}
|
||
object = object.getJSONObject("user_info");
|
||
AuthToken token = AuthToken.builder()
|
||
.openId(object.getString("openid"))
|
||
.unionId(object.getString("unionid"))
|
||
.build();
|
||
return AuthUser.builder()
|
||
.uuid(object.getString("unionid"))
|
||
.nickname(object.getString("nick"))
|
||
.username(object.getString("nick"))
|
||
.gender(AuthUserGender.UNKNOWN)
|
||
.source(source)
|
||
.token(token)
|
||
.build();
|
||
}
|
||
|
||
/**
|
||
* 返回带{@code state}参数的认证url，授权回调时会带上这个{@code state}
|
||
*
|
||
* @param state state 验证授权流程的参数，可以防止csrf
|
||
* @return 返回授权地址
|
||
* @since 1.9.3
|
||
*/
|
||
@Override
|
||
public String authorize(String state) {
|
||
return UrlBuilder.fromBaseUrl(source.authorize())
|
||
.queryParam("response_type", "code")
|
||
.queryParam("appid", config.getClientId())
|
||
.queryParam("scope", "snsapi_login")
|
||
.queryParam("redirect_uri", config.getRedirectUri())
|
||
.queryParam("state", getRealState(state))
|
||
.build();
|
||
}
|
||
|
||
/**
|
||
* 返回获取userInfo的url
|
||
*
|
||
* @param authToken 用户授权后的token
|
||
* @return 返回获取userInfo的url
|
||
*/
|
||
@Override
|
||
protected String userInfoUrl(AuthToken authToken) {
|
||
// 根据timestamp, appSecret计算签名值
|
||
String timestamp = System.currentTimeMillis() + "";
|
||
String urlEncodeSignature = GlobalAuthUtil.generateDingTalkSignature(config.getClientSecret(), timestamp);
|
||
|
||
return UrlBuilder.fromBaseUrl(source.userInfo())
|
||
.queryParam("signature", urlEncodeSignature)
|
||
.queryParam("timestamp", timestamp)
|
||
.queryParam("accessKey", config.getClientId())
|
||
.build();
|
||
}
|
||
}
|