devbox
笔触狂放9
这个屌丝很懒，什么也没留下！
关注作者
热门标签
热门文章
当前位置:   article > 正文

ASP.NET实现QQ、微信、新浪微博OAuth2.0授权登录_.net 微信、微博、qq三方登录

作者：笔触狂放9 | 2024-03-20 02:37:42

赞

踩

.net 微信、微博、qq三方登录

不管是腾讯还是新浪，查看他们的API，PHP都是有完整的接口，但对C#支持似乎都不是那么完善，都没有，腾讯是完全没有，新浪是提供第三方的，而且后期还不一定升级，NND，用第三方的动辄就一个类库，各种配置还必须按照他们约定的写，烦而且乱，索性自己写，后期的扩展也容易，看过接口后，开始以为很难，参考了几个源码之后发现也不是那么难，无非是GET或POST请求他们的接口获取返回值之类的，话不多说，这里只提供几个代码共参考，抛砖引玉了。。。


我这个写法的特点是，用到了Session，使用对象实例化之后调用 Login() 跳转到登录页面，在回调页面调用Callback() 执行之后，可以从Session也可以写独立的函数（如：GetOpenID()）中获取access_token或用户的唯一标识，以方便做下一步的操作。所谓绑定就是把用户的唯一标识取出，插入数据库，和帐号绑定起来。


1.首先是所有OAuth类的基类，放一些需要公用的方法

  1. public abstract class BaseOAuth
  2.     {
  3.         public HttpRequest Request = HttpContext.Current.Request;
  4.         public HttpResponse Response = HttpContext.Current.Response;
  5.         public HttpSessionState Session = HttpContext.Current.Session;
  6.  
  7.         public abstract void Login();
  8.         public abstract string Callback();
  9.  
  10.         #region 内部使用函数
  11.  
  12.         /// <summary>
  13.         /// 生成唯一随机串防CSRF攻击
  14.         /// </summary>
  15.         /// <returns></returns>
  16.         protected string GetStateCode()
  17.         {
  18.             Random rand = new Random();
  19.             string data = DateTime.Now.ToString("yyyyMMddHHmmssffff") + rand.Next(1, 0xf423f).ToString();
  20.  
  21.             MD5CryptoServiceProvider md5 = new MD5CryptoServiceProvider();
  22.  
  23.             byte[] md5byte = md5.ComputeHash(UTF8Encoding.Default.GetBytes(data));
  24.  
  25.             return BitConverter.ToString(md5byte).Replace("-", "");
  26.  
  27.         }
  28.  
  29.         /// <summary>
  30.         /// GET请求
  31.         /// </summary>
  32.         /// <param name="url"></param>
  33.         /// <returns></returns>
  34.         protected string GetRequest(string url)
  35.         {
  36.             HttpWebRequest httpWebRequest = System.Net.WebRequest.Create(url) as HttpWebRequest;
  37.             httpWebRequest.Method = "GET";
  38.             httpWebRequest.ServicePoint.Expect100Continue = false;
  39.  
  40.             StreamReader responseReader = null;
  41.             string responseData;
  42.             try
  43.             {
  44.                 responseReader = new StreamReader(httpWebRequest.GetResponse().GetResponseStream());
  45.                 responseData = responseReader.ReadToEnd();
  46.             }
  47.             finally
  48.             {
  49.                 httpWebRequest.GetResponse().GetResponseStream().Close();
  50.                 responseReader.Close();
  51.             }
  52.  
  53.             return responseData;
  54.         }
  55.  
  56.         /// <summary>
  57.         /// POST请求
  58.         /// </summary>
  59.         /// <param name="url"></param>
  60.         /// <param name="postData"></param>
  61.         /// <returns></returns>
  62.         protected string PostRequest(string url, string postData)
  63.         {
  64.             HttpWebRequest httpWebRequest = System.Net.WebRequest.Create(url) as HttpWebRequest;
  65.             httpWebRequest.Method = "POST";
  66.             httpWebRequest.ServicePoint.Expect100Continue = false;
  67.             httpWebRequest.ContentType = "application/x-www-form-urlencoded";
  68.  
  69.             //写入POST参数
  70.             StreamWriter requestWriter = new StreamWriter(httpWebRequest.GetRequestStream());
  71.             try
  72.             {
  73.                 requestWriter.Write(postData);
  74.             }
  75.             finally
  76.             {
  77.                 requestWriter.Close();
  78.             }
  79.  
  80.             //读取请求后的结果
  81.             StreamReader responseReader = null;
  82.             string responseData;
  83.             try
  84.             {
  85.                 responseReader = new StreamReader(httpWebRequest.GetResponse().GetResponseStream());
  86.                 responseData = responseReader.ReadToEnd();
  87.             }
  88.             finally
  89.             {
  90.                 httpWebRequest.GetResponse().GetResponseStream().Close();
  91.                 responseReader.Close();
  92.             }
  93.  
  94.             return responseData;
  95.         }
  96.  
  97.         /// <summary>
  98.         /// 解析JSON
  99.         /// </summary>
  100.         /// <param name="strJson"></param>
  101.         /// <returns></returns>
  102.         protected NameValueCollection ParseJson(string strJson)
  103.         {
  104.             NameValueCollection mc = new NameValueCollection();
  105.             Regex regex = new Regex(@"(\s*\""?([^""]*)\""?\s*\:\s*\""?([^""]*)\""?\,?)");
  106.             strJson = strJson.Trim();
  107.             if (strJson.StartsWith("{"))
  108.             {
  109.                 strJson = strJson.Substring(1, strJson.Length - 2);
  110.             }
  111.  
  112.             foreach (Match m in regex.Matches(strJson))
  113.             {
  114.                 mc.Add(m.Groups[2].Value, m.Groups[3].Value);
  115.             }
  116.             return mc;
  117.         }
  118.  
  119.         /// <summary>
  120.         /// 解析URL
  121.         /// </summary>
  122.         /// <param name="strParams"></param>
  123.         /// <returns></returns>
  124.         protected NameValueCollection ParseUrlParameters(string strParams)
  125.         {
  126.             NameValueCollection nc = new NameValueCollection();
  127.             foreach (string p in strParams.Split('&'))
  128.             {
  129.                 string[] ps = p.Split('=');
  130.                 nc.Add(ps[0], ps[1]);
  131.             }
  132.             return nc;
  133.         }
  134.  
  135.         #endregion
  136.  
  137.     }

2.QQ的OAuth类

  1. public class QQOAuth : BaseOAuth
  2.     {
  3.         public string AppId = ConfigurationManager.AppSettings["OAuth_QQ_AppId"];
  4.         public string AppKey = ConfigurationManager.AppSettings["OAuth_QQ_AppKey"];
  5.         public string RedirectUrl = ConfigurationManager.AppSettings["OAuth_QQ_RedirectUrl"];
  6.  
  7.         public const string GET_AUTH_CODE_URL = "https://graph.qq.com/oauth2.0/authorize";
  8.         public const string GET_ACCESS_TOKEN_URL = "https://graph.qq.com/oauth2.0/token";
  9.         public const string GET_OPENID_URL = "https://graph.qq.com/oauth2.0/me";
  10.  
  11.         /// <summary>
  12.         /// QQ登录，跳转到登录页面
  13.         /// </summary>
  14.         public override void Login()
  15.         {
  16.             //-------生成唯一随机串防CSRF攻击
  17.             string state = GetStateCode();
  18.             Session["QC_State"] = state; //state 放入Session
  19.  
  20.             string parms = "?response_type=code&"
  21.                 + "client_id=" + AppId + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl) + "&state=" + state;
  22.  
  23.             string url = GET_AUTH_CODE_URL + parms;
  24.             Response.Redirect(url); //跳转到登录页面
  25.         }
  26.  
  27.         /// <summary>
  28.         /// QQ回调函数
  29.         /// </summary>
  30.         /// <param name="code"></param>
  31.         /// <param name="state"></param>
  32.         /// <returns></returns>
  33.         public override string Callback()
  34.         {
  35.             string code = Request.QueryString["code"];
  36.             string state = Request.QueryString["state"];
  37.  
  38.             //--------验证state防止CSRF攻击
  39.             if (state != (string)Session["QC_State"])
  40.             {
  41.                 ShowError("30001");
  42.             }
  43.  
  44.             string parms = "?grant_type=authorization_code&"
  45.                 + "client_id=" + AppId + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl)
  46.                 + "&client_secret=" + AppKey + "&code=" + code;
  47.  
  48.             string url = GET_ACCESS_TOKEN_URL + parms;
  49.             string str = GetRequest(url);
  50.  
  51.             if (str.IndexOf("callback") != -1)
  52.             {
  53.                 int lpos = str.IndexOf("(");
  54.                 int rpos = str.IndexOf(")");
  55.                 str = str.Substring(lpos + 1, rpos - lpos - 1);
  56.                 NameValueCollection msg = ParseJson(str);
  57.                 if (!string.IsNullOrEmpty(msg["error"]))
  58.                 {
  59.                     ShowError(msg["error"], msg["error_description"]);
  60.                 }
  61.  
  62.             }
  63.  
  64.             NameValueCollection token = ParseUrlParameters(str);
  65.             Session["QC_AccessToken"] = token["access_token"]; //access_token 放入Session
  66.             return token["access_token"];
  67.         }
  68.  
  69.  
  70.         /// <summary>
  71.         /// 使用Access Token来获取用户的OpenID
  72.         /// </summary>
  73.         /// <param name="accessToken"></param>
  74.         /// <returns></returns>
  75.         public string GetOpenID()
  76.         {
  77.             string parms = "?access_token=" + Session["QC_AccessToken"];
  78.  
  79.             string url = GET_OPENID_URL + parms;
  80.             string str = GetRequest(url);
  81.  
  82.             if (str.IndexOf("callback") != -1)
  83.             {
  84.                 int lpos = str.IndexOf("(");
  85.                 int rpos = str.IndexOf(")");
  86.                 str = str.Substring(lpos + 1, rpos - lpos - 1);
  87.             }
  88.  
  89.             NameValueCollection user = ParseJson(str);
  90.  
  91.             if (!string.IsNullOrEmpty(user["error"]))
  92.             {
  93.                 ShowError(user["error"], user["error_description"]);
  94.             }
  95.  
  96.             Session["QC_OpenId"] = user["openid"]; //openid 放入Session
  97.             return user["openid"];
  98.         }
  99.  
  100.         /// <summary>
  101.         /// 显示错误信息
  102.         /// </summary>
  103.         /// <param name="code">错误编号</param>
  104.         /// <param name="description">错误描述</param>
  105.         private void ShowError(string code, string description = null)
  106.         {
  107.             if (description == null)
  108.             {
  109.                 switch (code)
  110.                 {
  111.                     case "20001":
  112.                         description = "<h2>配置文件损坏或无法读取，请检查web.config</h2>";
  113.                         break;
  114.                     case "30001":
  115.                         description = "<h2>The state does not match. You may be a victim of CSRF.</h2>";
  116.                         break;
  117.                     case "50001":
  118.                         description = "<h2>可能是服务器无法请求https协议</h2>可能未开启curl支持,请尝试开启curl支持，重启web服务器，如果问题仍未解决，请联系我们";
  119.                         break;
  120.                     default:
  121.                         description = "<h2>系统未知错误，请联系我们</h2>";
  122.                         break;
  123.                 }
  124.                 Response.Write(description);
  125.                 Response.End();
  126.             }
  127.             else
  128.             {
  129.                 Response.Write("<h3>error:<h3>" + code + "<h3>msg:<h3>" + description);
  130.                 Response.End();
  131.             }
  132.         }
  133.  
  134.     }

3.新浪微博的OAuth类 

  1. public class SinaOAuth : BaseOAuth
  2.     {
  3.         public string AppKey = ConfigurationManager.AppSettings["OAuth_Sina_AppKey"];
  4.         public string AppSecret = ConfigurationManager.AppSettings["OAuth_Sina_AppSecret"];
  5.         public string RedirectUrl = ConfigurationManager.AppSettings["OAuth_Sina_RedirectUrl"];
  6.  
  7.         public const string GET_AUTH_CODE_URL = "https://api.weibo.com/oauth2/authorize";
  8.         public const string GET_ACCESS_TOKEN_URL = "https://api.weibo.com/oauth2/access_token";
  9.         public const string GET_UID_URL = "https://api.weibo.com/2/account/get_uid.json";
  10.  
  11.         /// <summary>
  12.         /// 新浪微博登录，跳转到登录页面
  13.         /// </summary>
  14.         public override void Login()
  15.         {
  16.             //-------生成唯一随机串防CSRF攻击
  17.             string state = GetStateCode();
  18.             Session["Sina_State"] = state; //state 放入Session
  19.  
  20.             string parms = "?client_id=" + AppKey + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl)
  21.                 + "&state=" + state;
  22.  
  23.             string url = GET_AUTH_CODE_URL + parms;
  24.             Response.Redirect(url); //跳转到登录页面
  25.         }
  26.  
  27.         /// <summary>
  28.         /// 新浪微博回调函数
  29.         /// </summary>
  30.         /// <returns></returns>
  31.         public override string Callback()
  32.         {
  33.             string code = Request.QueryString["code"];
  34.             string state = Request.QueryString["state"];
  35.  
  36.             //--------验证state防止CSRF攻击
  37.             if (state != (string)Session["Sina_State"])
  38.             {
  39.                 ShowError("The state does not match. You may be a victim of CSRF.");
  40.             }
  41.  
  42.             string parms = "client_id=" + AppKey + "&client_secret=" + AppSecret
  43.                 + "&grant_type=authorization_code&code=" + code + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl);
  44.  
  45.             string str = PostRequest(GET_ACCESS_TOKEN_URL, parms);
  46.  
  47.             NameValueCollection user = ParseJson(str);
  48.  
  49.             Session["Sina_AccessToken"] = user["access_token"]; //access_token 放入Session
  50.             Session["Sina_UId"] = user["uid"]; //uid 放入Session
  51.             return user["access_token"];
  52.         }
  53.  
  54.  
  55.         /// <summary>
  56.         /// 显示错误信息
  57.         /// </summary>
  58.         /// <param name="description">错误描述</param>
  59.         private void ShowError(string description = null)
  60.         {
  61.             Response.Write("<h2>" + description + "</h2>");
  62.             Response.End();
  63.         }
  64.     }

4.微信的OAuth类 

  1. public class WeixinOAuth : BaseOAuth
  2.     {
  3.         public string AppId = ConfigurationManager.AppSettings["OAuth_Weixin_AppId"];
  4.         public string AppSecret = ConfigurationManager.AppSettings["OAuth_Weixin_AppSecret"];
  5.         public string RedirectUrl = ConfigurationManager.AppSettings["OAuth_Weixin_RedirectUrl"];
  6.  
  7.         public const string GET_AUTH_CODE_URL = "https://open.weixin.qq.com/connect/qrconnect";
  8.         public const string GET_ACCESS_TOKEN_URL = "https://api.weixin.qq.com/sns/oauth2/access_token";
  9.         public const string GET_USERINFO_URL = "https://api.weixin.qq.com/sns/userinfo";
  10.  
  11.         /// <summary>
  12.         /// 微信登录，跳转到登录页面
  13.         /// </summary>
  14.         public override void Login()
  15.         {
  16.             //-------生成唯一随机串防CSRF攻击
  17.             string state = GetStateCode();
  18.             Session["Weixin_State"] = state; //state 放入Session
  19.  
  20.             string parms = "?appid=" + AppId
  21.                 + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl) + "&response_type=code&scope=snsapi_login"
  22.                 + "&state=" + state + "#wechat_redirect";
  23.  
  24.             string url = GET_AUTH_CODE_URL + parms;
  25.             Response.Redirect(url); //跳转到登录页面
  26.         }
  27.  
  28.         /// <summary>
  29.         /// 微信回调函数
  30.         /// </summary>
  31.         /// <param name="code"></param>
  32.         /// <param name="state"></param>
  33.         /// <returns></returns>
  34.         public override string Callback()
  35.         {
  36.             string code = Request.QueryString["code"];
  37.             string state = Request.QueryString["state"];
  38.  
  39.             //--------验证state防止CSRF攻击
  40.             if (state != (string)Session["Weixin_State"])
  41.             {
  42.                 ShowError("30001");
  43.             }
  44.  
  45.             string parms = "?appid=" + AppId + "&secret=" + AppSecret
  46.                 + "&code=" + code + "&grant_type=authorization_code";
  47.  
  48.             string url = GET_ACCESS_TOKEN_URL + parms;
  49.             string str = GetRequest(url);
  50.  
  51.             
  52.             NameValueCollection msg = ParseJson(str);
  53.             if (!string.IsNullOrEmpty(msg["errcode"]))
  54.             {
  55.                 ShowError(msg["errcode"], msg["errmsg"]);
  56.             }
  57.  
  58.             Session["Weixin_AccessToken"] = msg["access_token"]; //access_token 放入Session
  59.             Session["Weixin_OpenId"] = msg["openid"]; //access_token 放入Session
  60.             return msg["access_token"];
  61.         }
  62.  
  63.  
  64.         /// <summary>
  65.         /// 显示错误信息
  66.         /// </summary>
  67.         /// <param name="code">错误编号</param>
  68.         /// <param name="description">错误描述</param>
  69.         private void ShowError(string code, string description = null)
  70.         {
  71.             if (description == null)
  72.             {
  73.                 switch (code)
  74.                 {
  75.                     case "20001":
  76.                         description = "<h2>配置文件损坏或无法读取，请检查web.config</h2>";
  77.                         break;
  78.                     case "30001":
  79.                         description = "<h2>The state does not match. You may be a victim of CSRF.</h2>";
  80.                         break;
  81.                     case "50001":
  82.                         description = "<h2>接口未授权</h2>";
  83.                         break;
  84.                     default:
  85.                         description = "<h2>系统未知错误，请联系我们</h2>";
  86.                         break;
  87.                 }
  88.                 Response.Write(description);
  89.                 Response.End();
  90.             }
  91.             else
  92.             {
  93.                 Response.Write("<h3>error:<h3>" + code + "<h3>msg:<h3>" + description);
  94.                 Response.End();
  95.             }
  96.         }
  97.  
  98.     }

5.web.config配置信息 

  1. <appSettings>
  2.         <!--QQ登录相关配置-->
  3.         <add key="OAuth_QQ_AppId" value="123456789" />
  4.         <add key="OAuth_QQ_AppKey" value="25f9e794323b453885f5181f1b624d0b" />
  5.         <add key="OAuth_QQ_RedirectUrl" value="http://www.domain.com/oauth20/qqcallback.aspx" />
  6.  
  7.         <!--新浪微博登录相关配置-->
  8.         <add key="OAuth_Sina_AppKey" value="123456789" />
  9.         <add key="OAuth_Sina_AppSecret" value="25f9e794323b453885f5181f1b624d0b" />
  10.         <add key="OAuth_Sina_RedirectUrl" value="http://www.domain.com/oauth20/sinacallback.aspx" />
  11.  
  12.         <!--微信登录相关配置-->
  13.         <add key="OAuth_Weixin_AppId" value="wx123456789123" />
  14.         <add key="OAuth_Weixin_AppSecret" value="25f9e794323b453885f5181f1b624d0b" />
  15.         <add key="OAuth_Weixin_RedirectUrl" value="http://www.domain.com/oauth20/weixincallback.aspx" />
  16. </appSettings>

原文地址： ASP.NET实现QQ、微信、新浪微博OAuth2.0授权登录

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/笔触狂放9/article/detail/270048
推荐阅读

Copyright © 2003-2013 www.wpsshop.cn 版权所有，并保留所有权利。