微信第三方应用平台授权公众号/小程序

<?php
/*
*    微信授权第三方应用平台
 */
class Authorize
{
    private $component_appid;    //微信第三方应用平台appid
    private $component_secret;    //微信第三方应用平台appsecret
    private $component_token;    //微信第三方应用平台消息检验token
    private $component_key;        //微信第三方应用平台消息加解密key

    public function __construct($component_appid,$component_secret,$component_token,$component_key)
    {
        $this->component_appid     = $component_appid;
        $this->component_secret = $component_secret;
        $this->component_token     = $component_token;
        $this->component_key     = $component_key;
    }

    /*
    *微信公众号/小程序授权给第三方应用平台
    *@params string $redirect_url : 授权后的回调地址
    *@params string $ticket : component_verify_ticket值
    *@params int $auth_type : 授权类型，1公众号，2小程序
    *return string $auth_url : 授权链接
     */
    public function start_authorization($redirect_uri,$ticket,$auth_type)
    {
        $component_access_token = $this->get_component_access_token($ticket);
        $pre_auth_code = $this->get_pre_auth_code($component_access_token);
        return "https://mp.weixin.qq.com/cgi-bin/componentloginpage?component_appid=".$this->component_appid."&pre_auth_code=".$pre_auth_code."&redirect_uri=".urlencode($redirect_uri)."&auth_type=".$auth_type;
    }
    /*
    *接收微信消息自身推送事件，如：公众号/小程序取消授权，ticket值等
    *解密ticket值/AuthorizerAppid
    *对应的URL链接在微信应用第三方平台中填写的“授权事件接收URL”
     */
    public function receiveMsg()
    {
        require_once('crypt/wxBizMsgCrypt.php');
        $encryptMsg = isset($GLOBALS["HTTP_RAW_POST_DATA"]) ? $GLOBALS['HTTP_RAW_POST_DATA'] : file_get_contents("php://input");
        $xml_tree = new \DOMDocument();
        $xml_tree->loadXML($encryptMsg);
        $xml_array = $xml_tree->getElementsByTagName("Encrypt");
        $encrypt = $xml_array->item(0)->nodeValue;
        $Prpcrypt = new \Prpcrypt($this->component_key);
        $postData = $Prpcrypt->decrypt($encrypt, $this->component_appid);
        if($postData[0] != 0){
            return $postData[0];
        } else {
            $xml = new \DOMDocument();
            $xml->loadXML($postData[1]);
            $array_a = $xml->getElementsByTagName("InfoType");
            $infoType = $array_a->item(0)->nodeValue;
            //取消授权
            if($infoType == 'unauthorized') {
                $array_b = $xml->getElementsByTagName("AuthorizerAppid");
                $AuthorizerAppid = $array_b->item(0)->nodeValue;
            }
            //ticket值
            elseif($infoType == 'component_verify_ticket') {
                $array_e = $xml->getElementsByTagName("ComponentVerifyTicket");
                $component_verify_ticket = $array_e->item(0)->nodeValue;
            }
        }
    }
    /*
    *获取微信第三方应用平台componet_access_token
    *@params string $component_ticket : 第三方应用平台ticket值（每10分钟微信后台将推送该值）
    *return string $compoent_access_token : 第三方应用平台access_token
     */
    private function get_component_access_token($component_verify_ticket)
    {

        $json = json_decode(file_get_contents('component_access_token.json'));
        if(isset($json->component_access_token) && !empty($json->component_access_token) && ($json->expires_in < time()) ){
            return $json->component_access_token;
        } else {
            $url = "https://api.weixin.qq.com/cgi-bin/component/api_component_token";
            $data = '{"component_appid":"'.$this->component_appid.'","component_appsecret":"'.$this->component_secret.'","component_verify_ticket":"'.$component_verify_ticket.'"}';
            $ret = json_decode($this->https_post($url,$data));
            if(isset($ret->component_access_token)) {
                $json = '{"component_access_token":"'.$ret->component_access_token.'","expires_in":"'.(time() + $ret->expires_in).'"}';
                file_put_contents('component_access_token.json',$json);
                return $ret->component_access_token;
            } else {
                return null;
            }
        }
    }
    /*
    *获取预授权码pre_auth_code
    *@params string $component_access_token : 第三方应用平台access_token
    *return json $ret : 返回pre_auth_code、expires_in
     */
    private function get_pre_auth_code($component_access_token)
    {
        $json = json_decode(file_get_contents('pre_auth_code.json'));
        if(isset($json->pre_auth_code) && !empty($json->pre_auth_code) && ($json->expires_in < time()) ){
            return $json->pre_auth_code;
        } else {
            $url = "https://api.weixin.qq.com/cgi-bin/component/api_create_preauthcode?component_access_token=".$component_access_token;
            $data = '{"component_appid":"'.$this->component_appid.'"}';
            $ret = json_decode($this->https_post($url,$data));
            if(isset($ret->pre_auth_code)) {
                $json = '{"pre_auth_code":"'.$ret->pre_auth_code.'","expires_in":"'.(time() + $ret->expires_in).'"}';
                file_put_contents('pre_auth_code.json',$json);
                return $ret->pre_auth_code;
            } else {
                return null;
            }
        }
    }

    /*
    *发送https_post请求
    *@params string $url : URL链接
    *@params json $data : 发送JSON数据
    *return json $ret : 返回请求的结果
     */
    private function https_post($url,$data)
    {
        $curl = curl_init();
        curl_setopt($curl, CURLOPT_URL, $url);
        if (!empty($data)){
            curl_setopt($curl, CURLOPT_POST, 1);
            curl_setopt($curl, CURLOPT_POSTFIELDS, $data);
        }
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
        $output = curl_exec($curl);
        curl_close($curl);
        return $output;
    }
    /*
    *发送https_get请求
    *@params string $url : URL链接
    *return json $ret : 返回请求的结果
     */
    private function https_get($url)
    {
        $curl = curl_init();
        curl_setopt($curl, CURLOPT_URL, $url); 
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE); 
        curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE); 
        curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, FALSE);
        curl_setopt($curl, CURLOPT_HEADER, FALSE) ; 
        curl_setopt($curl, CURLOPT_TIMEOUT,60);    
        if (curl_errno($curl)) {
            return 'Errno'.curl_error($curl);
        }
        else{$result=curl_exec($curl);}
        curl_close($curl);
        return $result;
    }
}



$link = mysqli_connect('localhost','root','root','weixin');
$sql = " select `appId`,`appSecret`,`token`,`encodingAesKey`,`component_verify_ticket`,`component_access_token` from `weixin` where `type` = 1 ";
$result = mysqli_query($link,$sql);
$component = [];
while ($row = mysqli_fetch_assoc($result)) {
    $component['appid'] = $row['appId'];
    $component['secret'] = $row['appSecret'];
    $component['token'] = $row['token'];
    $component['key'] = $row['encodingAesKey'];
    $component['ticket'] = $row['component_verify_ticket'];
    $component['component_access_token'] = $row['component_access_token'];
}
$authorize = new Authorize($component['appid'],$component['secret'],$component['token'],$component['key']);
$auth_url = $authorize->start_authorization('http://www.baidu.com/user/authorize_back.html',$component['ticket'],1);
echo '<a href="'.$auth_url.'">'.$auth_url.'</a>';
?>

crypt为微信官方消息解密demo包，下载地址：https://wximg.gtimg.com/shake...