微信小程序登錄獲取手機號 后台C#流程代碼

最近在做這個登錄功能接口，記錄一下

 

1、小程序端調用wx.login方法獲取code，后端使用WeChatAuth方法請求auth.code2Session接口使用appid、secret、js_code、grant_type：默認authorization_code獲取session_key、openid

auth.code2Session官方地址：https://developers.weixin.qq.com/miniprogram/dev/api-backend/open-api/login/auth.code2Session.html

2、后端通過redis保存session_key、openid自定義登錄狀態並返回小程序端(也可以直接將兩個參數傳回小程序端，但是不安全)

3、小程序端使用button讓用戶進行授權獲取到encryptedData、iv加密數據和自定義狀登錄狀態傳回后端WeChatAuthUserInfo方法，判斷登錄狀態

4、后端使用Decrypt方法將加密數據進行解密，並反序列化為PhoneInfo類獲取到手機號進行數據庫操作

 

/// <summary>
        /// 微信小程序-獲取登陸憑證code
        /// </summary>
        /// <param name="_"></param>
        /// <returns></returns>
        public Response WeChatAuth(dynamic _)
        {

            WechatLoginInfo req = this.GetReq<WechatLoginInfo>();
            string Auth_code = req.code;
            if (string.IsNullOrEmpty(Auth_code))
            {
                return Fail("未獲取到Auth_code");
            }
            string AppId = Config.GetValue("WeChatAppId");
            string AppSecret = Config.GetValue("WeChatAppSecret");


            WebClient wc = new WebClient();
            wc.Encoding = System.Text.Encoding.UTF8;


            //第一步：通過code換取網頁授權access_token
            NameValueCollection tokennvc = new NameValueCollection();
            tokennvc.Add("appid", AppId);
            tokennvc.Add("secret", AppSecret);
            tokennvc.Add("js_code", Auth_code);
            tokennvc.Add("grant_type", "authorization_code");
            string tokenresult = System.Text.Encoding.UTF8.GetString(wc.UploadValues("https://api.weixin.qq.com/sns/jscode2session?", tokennvc));
            if (tokenresult.Contains("errcode"))
            {
                AccessError accessError = Newtonsoft.Json.JsonConvert.DeserializeObject<AccessError>(tokenresult);
                return Fail(accessError.errmsg);
            }
　　　　　　　//反序列化
            AuthAccessToken auth = Newtonsoft.Json.JsonConvert.DeserializeObject<AuthAccessToken>(tokenresult);

            TimeSpan ts = new TimeSpan(48, 0, 0);
            string token_session = Guid.NewGuid().ToString();

            //寫入Redis
            redisCache.Write<AuthAccessToken>("token_session_"+ token_session, auth, ts, CacheId.client);

            return Success(token_session);
        }
         77 
        /// <summary>
        /// 根據微信小程序平台提供的解密算法解密數據
        /// </summary>
        /// <param name="encryptedData">加密數據</param>
        /// <param name="iv">初始向量</param>
        /// <param name="sessionKey">從服務端獲取的SessionKey</param>
        /// <returns></returns>
        public PhoneInfo Decrypt(WechatLoginInfo loginInfo,string session_key)
        {

            //創建解密器生成工具實例
            AesCryptoServiceProvider aes = new AesCryptoServiceProvider();

            //設置解密器參數

            aes.Mode = CipherMode.CBC;

            aes.BlockSize = 128;

            aes.Padding = PaddingMode.PKCS7;

            //格式化待處理字符串

            byte[] byte_encryptedData = Convert.FromBase64String(loginInfo.encryptedData);

            byte[] byte_iv = Convert.FromBase64String(loginInfo.iv);

            byte[] byte_sessionKey = Convert.FromBase64String(session_key);

            aes.IV = byte_iv;

            aes.Key = byte_sessionKey;

            //根據設置好的數據生成解密器實例

            ICryptoTransform transform = aes.CreateDecryptor();

            //解密

            byte[] final = transform.TransformFinalBlock(byte_encryptedData, 0, byte_encryptedData.Length);

            //生成結果

            string result = Encoding.UTF8.GetString(final);

            //反序列化結果，生成用戶信息實例

           var phoneInfo = Newtonsoft.Json.JsonConvert.DeserializeObject<PhoneInfo>(result);

            return phoneInfo;

        }


        /// <summary>
        /// 獲取微信小程序用戶信息
        /// </summary>
        /// <param name="_">The .</param>
        /// <returns></returns>
        public Response WeChatAuthUserInfo(dynamic _)
        {
            WechatLoginInfo req = this.GetReq<WechatLoginInfo>();
            var AuthLogin = redisCache.Read<AuthAccessToken>("token_session_"+req.token_session, CacheId.clientuser);
            if (AuthLogin== null)
            {
                return Fail("找不到登錄密鑰");
            }

            //數據解密，解密手機號等重要信息
            PhoneInfo userinfojson = Decrypt(req,AuthLogin.session_key);

            if (userinfojson==null)
            {
                return Fail("數據解密失敗");
            }

            string Token = Guid.NewGuid().ToString().Substring(0,8);
            string UserId = "";

            #region
            //查詢數據庫userinfo是否有openid（沒有的話insert，有的話更新）openid是微信用戶唯一標識符
            if (userinfo != null)
            {
                userinfo.Phone = userinfojson.phoneNumber;
                userinfo.OpenId = AuthLogin.openid;
                //進行update實例userinfo
                UserId = userinfo.Id;
            }
            else
            {
                //進行insert entity171                 entity.Nick_Name = Nick_Name;
                entity.Phone = userinfojson.phoneNumber;
                entity.OpenId = AuthLogin.openid;176 
                UserId = entity.Id;
            }
            //UserInfo實例類
            UserInfo userentity = new UserInfo();
            userentity.Id = UserId;
            userentity.Token = Token;
            userentity.Nick_Name = Nick_Name;
            userentity.Phone = userinfojson.phoneNumber;
            userentity.AddTime = DateTime.Now;
            userentity.OpenId = AuthLogin.openid;
　　　　　　　//有效期
            TimeSpan ts = new TimeSpan(48, 0, 0);

            //寫入Redis
            redisCache.Write<ResUserInfo>(Token, userentity, ts, CacheId.userinfo);

            #endregion

            return Success(userentity);
        }


        /// <summary>
        /// 錯誤信息
        /// </summary>
        public class AccessError
        {
            /// <summary>
            /// 錯誤碼
            /// </summary>
            public string errcode { get; set; }
            /// <summary>
            /// 錯誤信息
            /// </summary>
            public string errmsg { get; set; }
        }

        /// <summary>
        /// 獲取AccessToken
        /// </summary>
        public class AuthAccessToken
        {
            //會話密鑰,
            public string session_key { get; set; }
            /// <summary>
            /// access_token接口調用憑證超時時間，單位（秒）
            /// </summary>
            public string expires_in { get; set; }
            /// <summary>
            /// 獲取到的憑證
            /// </summary>
            public string access_token { get; set; }
            /// <summary>
            /// 用戶唯一標識，請注意，在未關注公眾號時，用戶訪問公眾號的網頁，也會產生一個用戶和公眾號唯一的OpenID
            /// </summary>
            public string openid { get; set; }

        }
   299 
        /// <summary>
        /// 加密的數據
        /// </summary>
        public class Watermark

        {
            public string appid { get; set; }

            public string timestamp { get; set; }

        }

        /// <summary>
        /// 登錄獲取信息請求參數
        /// </summary>
        public class WechatLoginInfo
        {
            //自定義登錄狀態,
            public string token_session { get; set; }

            public string code { get; set; }

            /// <summary>
            ///加密數據
            /// </summary>
            /// <value>
            /// </value>
            public string encryptedData { get; set; }

            /// <summary>
            /// 加密算法的初始向量
            /// </summary>
            /// <value>
            /// The iv.
            /// </value>
            public string iv { get; set; }

            /// <summary>
            /// 不包括敏感信息的原始數據字符串，用於計算簽名
            /// </summary>
            /// <value>
            /// The raw data.
            /// </value>
            public WeChatUserInfo rawData { get; set; }

            /// <summary>
            /// 校驗用戶信息
            /// </summary>
            /// <value>
            /// The signature.
            /// </value>
            public string signature { get; set; }

            public WeChatUserInfo UserInfo { get; set; }

            /// <summary>
            /// 語言.
            /// </summary>
            /// <value>
            /// The language.
            /// </value>
            public string language { get; set; }

        }

        /// <summary>
        /// 手機號信息
        /// </summary>
        public class PhoneInfo
        {

            /// <summary>
            /// 用戶的唯一標識
            /// </summary>
            public string openid { get; set; }
            /// <summary>
            /// 用戶綁定的手機號
            /// </summary>
            /// <value>
            /// The phone number.
            /// </value>
            public string phoneNumber { get; set; }
            /// <summary>
            /// 沒有區號的手機號
            /// </summary>
            /// <value>
            /// The pure phone number.
            /// </value>
            public string purePhoneNumber { get; set; }
            /// <summary>
            /// 區號
            /// </summary>
            /// <value>
            /// The country code.
            /// </value>
            public string countryCode { get; set; }


            public Watermark watermark { get; set; }
        }