828 lines
34 KiB
Python
828 lines
34 KiB
Python
from rest_framework.views import APIView
|
||
from mysystem.models import Users
|
||
from apps.oauth.models import OAuthWXUser
|
||
from utils.jsonResponse import SuccessResponse,ErrorResponse,DetailResponse
|
||
from rest_framework_simplejwt.serializers import TokenObtainPairSerializer
|
||
from rest_framework_simplejwt.views import TokenObtainPairView
|
||
from utils.common import get_parameter_dic,REGEX_MOBILE
|
||
from config import WX_XCX_APPID,WX_XCX_APPSECRET,WX_GZH_APPID,WX_GZH_APPSECRET,WX_GZH_TOKEN,WX_GZPT_APPSECRET,WX_GZPT_APPID,TT_XCX_APPID,TT_XCX_APPSECRET,DOMAIN_HOST
|
||
import requests
|
||
import base64
|
||
import json
|
||
from Crypto.Cipher import AES
|
||
from django.utils.translation import gettext_lazy as _
|
||
from rest_framework_simplejwt.authentication import JWTAuthentication
|
||
from rest_framework.permissions import IsAuthenticated
|
||
import re
|
||
import uuid
|
||
from django.db import transaction
|
||
from django.db.models import F
|
||
from django.core.cache import cache
|
||
import logging
|
||
from django_redis import get_redis_connection
|
||
import base64
|
||
import os
|
||
import datetime
|
||
from django.conf import settings
|
||
from utils.common import renameuploadimg
|
||
import hashlib
|
||
from django.http import HttpResponse
|
||
from utils.weixinpay import WxAppPay
|
||
from django.shortcuts import redirect
|
||
|
||
logger = logging.getLogger(__name__)
|
||
# Create your views here.
|
||
# ================================================= #
|
||
# ************** 微信小程序登录 view ************** #
|
||
# ================================================= #
|
||
class XCXLoginSerializer(TokenObtainPairSerializer):
|
||
"""
|
||
登录的序列化器:
|
||
重写djangorestframework-simplejwt的序列化器
|
||
"""
|
||
|
||
@classmethod
|
||
def get_token(cls, user):
|
||
refresh = super(XCXLoginSerializer,cls).get_token(user)
|
||
data = {}
|
||
data['openid'] = user.oauthwxuser.xcx_openid
|
||
data['userId'] = user.id
|
||
data['refresh'] = str(refresh)
|
||
data['access'] = str(refresh.access_token)
|
||
return data
|
||
|
||
'''
|
||
WeChat Crypt
|
||
'''
|
||
class WeChatCrypt:
|
||
def __init__(self, appId, sessionKey):
|
||
self.appId = appId
|
||
self.sessionKey = sessionKey
|
||
|
||
def decrypt(self, encryptedData, iv):
|
||
# base64 decode
|
||
sessionKey = base64.b64decode(self.sessionKey)
|
||
encryptedData = base64.b64decode(encryptedData)
|
||
iv = base64.b64decode(iv)
|
||
cipher = AES.new(sessionKey, AES.MODE_CBC, iv)
|
||
decrypted = json.loads(self._unpad(cipher.decrypt(encryptedData)))
|
||
|
||
if decrypted['watermark']['appid'] != self.appId:
|
||
raise Exception('Invalid Buffer')
|
||
|
||
return decrypted
|
||
|
||
def _unpad(self, s):
|
||
return s[:-ord(s[len(s)-1:])]
|
||
|
||
#获取微信用户的openid等用户信息
|
||
|
||
def get_wechat_login_code_url(jscode):
|
||
api_url = 'https://api.weixin.qq.com/sns/jscode2session?appid={0}&secret={1}&js_code={2}&grant_type=authorization_code'
|
||
get_url = api_url.format(WX_XCX_APPID,WX_XCX_APPSECRET,jscode)
|
||
r = requests.get(get_url)
|
||
return r
|
||
|
||
|
||
#微信小程序登录接口
|
||
class WeChatXCXLoginAPIView(APIView):
|
||
"""
|
||
post:
|
||
微信小程序登录接口
|
||
微信小程序code获取openid
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
@transaction.atomic # 开启事务,当方法执行完成以后，自动提交事务
|
||
def post(self, request):
|
||
jscode = get_parameter_dic(request)['code']
|
||
# inviter = get_parameter_dic(request).get('inviter')#为推广者的userid
|
||
if not jscode:
|
||
return ErrorResponse(msg="code不能为空")
|
||
resp = get_wechat_login_code_url(jscode)
|
||
openid = None
|
||
session_key = None
|
||
unionid = None
|
||
if resp.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试")
|
||
# json_data = {'errcode':0,'openid':'111','session_key':'test'}
|
||
json_data =json.loads(resp.content)
|
||
if 'errcode' in json_data:#如果获取失败返回失败信息
|
||
return ErrorResponse(msg=json_data['errmsg'])
|
||
|
||
openid = json_data['openid']
|
||
session_key = json_data['session_key']
|
||
|
||
if "unionid" in json_data:
|
||
unionid = json_data['unionid']
|
||
|
||
# 判断用户是否存在
|
||
try:
|
||
wxuser = Users.objects.get(username=openid)
|
||
wxuser.oauthwxuser.session_key = session_key # 小写oauthwxuser 表示关联的外键
|
||
wxuser.oauthwxuser.xcx_openid = openid
|
||
wxuser.oauthwxuser.unionId = unionid
|
||
wxuser.oauthwxuser.save()
|
||
resdata = XCXLoginSerializer.get_token(wxuser)
|
||
return SuccessResponse(data=resdata, msg="success")
|
||
except Exception as e:
|
||
with transaction.atomic():
|
||
savepoint = transaction.savepoint()
|
||
user = Users()
|
||
user.username = openid
|
||
user.password = uuid.uuid4() # 先随机生成一个密码，防止别人获取openid直接被登录情况
|
||
user.identity = 2 # 用户身份2表示前端用户
|
||
user.save()
|
||
OAuthWXUser.objects.create(user=user,session_key=session_key,xcx_openid=openid)
|
||
# if inviter: # 如果存在邀请码
|
||
# integral = FenXiaoManage.objects.filter(type=1, status=True).values_list('content', flat=True).first()
|
||
# if integral: # 如果推广积分活动还存在
|
||
# Users.objects.filter(id=inviter).update(integral=F('integral') + int(integral))
|
||
# InviteRecord.objects.create(inv_user_id=inviter, invitee_user=user, get_integral=integral)
|
||
# IntegralRecord.objects.create(user_id=inviter,type=4,income=1,integral=integral)
|
||
# 清除保存点
|
||
transaction.savepoint_commit(savepoint)
|
||
resdata = XCXLoginSerializer.get_token(user)
|
||
return SuccessResponse(data=resdata, msg="success")
|
||
|
||
|
||
def filter_emoji(desstr, restr=''):
|
||
# 过滤表情
|
||
try:
|
||
res = re.compile(u'[\U00010000-\U0010ffff]')
|
||
except re.error:
|
||
res = re.compile(u'[\uD800-\uDBFF][\uDC00-\uDFFF]')
|
||
return res.sub(restr, desstr)
|
||
|
||
#微信小程序手机号授权登录接口
|
||
class WeChatXCXMobileLoginAPIView(APIView):
|
||
"""
|
||
post:
|
||
微信小程序手机号授权登录接口
|
||
微信小程序code获取openid，并解密前端传的手机号encryptedData加密数据
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
def post(self, request):
|
||
inviter = get_parameter_dic(request).get('inviter')#邀请码#为推广者的userid
|
||
jscode = get_parameter_dic(request)['code']
|
||
iv = get_parameter_dic(request)['iv']
|
||
encryptedData = get_parameter_dic(request)['encryptedData']
|
||
nickname = get_parameter_dic(request)['nickname']
|
||
avatar_url = get_parameter_dic(request)['avatar_url']
|
||
gender = get_parameter_dic(request)['gender']
|
||
nickname = filter_emoji(nickname, '')
|
||
if jscode is None:
|
||
return ErrorResponse(msg="code不能为空")
|
||
if iv is None:
|
||
return ErrorResponse(msg="iv不能为空")
|
||
if encryptedData is None:
|
||
return ErrorResponse(msg="encryptedData不能为空")
|
||
if avatar_url is None:
|
||
return ErrorResponse(msg="avatar_url不能为空")
|
||
|
||
resp = get_wechat_login_code_url(jscode)
|
||
openid = None
|
||
session_key = None
|
||
unionid = ""
|
||
if resp.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试")
|
||
# json_data = {'errcode':0,'openid':'111','session_key':'test'}
|
||
json_data =json.loads(resp.content)
|
||
if 'errcode' in json_data:#如果获取失败返回失败信息
|
||
return ErrorResponse(msg=json_data['errmsg'])
|
||
|
||
openid = json_data['openid']
|
||
session_key = json_data['session_key']
|
||
|
||
if "unionid" in json_data:
|
||
unionid = json_data['unionid']
|
||
|
||
wxdc = WeChatCrypt(WX_XCX_APPID, session_key)
|
||
|
||
pResult = wxdc.decrypt(encryptedData, iv)
|
||
|
||
#判断用户是否存在
|
||
try:
|
||
wxuser = Users.objects.get(username = openid)
|
||
if not wxuser.is_active:
|
||
return ErrorResponse(msg="该用户已禁用，请联系管理员")
|
||
wxuser.oauthwxuser.session_key = session_key#小写oauthwxuser 表示关联的外键
|
||
wxuser.oauthwxuser.xcx_openid = openid
|
||
wxuser.oauthwxuser.unionId = unionid
|
||
wxuser.oauthwxuser.avatarUrl=avatar_url
|
||
wxuser.oauthwxuser.sex = gender
|
||
wxuser.oauthwxuser.mobilePhoneNumber = pResult['phoneNumber']
|
||
wxuser.oauthwxuser.nick = nickname
|
||
wxuser.oauthwxuser.save()
|
||
wxuser.nickname = nickname
|
||
wxuser.avatar = avatar_url
|
||
wxuser.gender = gender
|
||
wxuser.save()
|
||
resdata = XCXLoginSerializer.get_token(wxuser)
|
||
return SuccessResponse(data=resdata,msg="success")
|
||
except Exception as e:#新用户
|
||
with transaction.atomic():
|
||
try:
|
||
savepoint = transaction.savepoint()
|
||
user = Users()
|
||
user.username = openid
|
||
user.password = uuid.uuid4() #先随机生成一个密码，防止别人获取openid直接被登录情况
|
||
user.identity = 2 # 用户身份2表示前端用户
|
||
user.nickname = nickname
|
||
user.name = nickname
|
||
user.avatar = avatar_url
|
||
user.mobile = pResult['phoneNumber']
|
||
user.save()
|
||
OAuthWXUser.objects.create(user=user,session_key=session_key,xcx_openid=openid,avatarUrl=avatar_url,sex=gender,mobilePhoneNumber=pResult['phoneNumber'],nick=nickname)
|
||
# if inviter:#如果存在邀请码
|
||
# integral = FenXiaoManage.objects.filter(type=1,status=True).values_list('content',flat=True).first()
|
||
# if integral:#如果推广积分活动还存在
|
||
# Users.objects.filter(id=inviter).update(integral=F('integral')+int(integral))
|
||
# InviteRecord.objects.create(inv_user_id=inviter,invitee_user=user,get_integral=integral)
|
||
# IntegralRecord.objects.create(user_id=inviter, type=4, income=1, integral=integral)
|
||
except Exception as e:
|
||
transaction.savepoint_rollback(savepoint)
|
||
return ErrorResponse(msg=str(e))
|
||
# 清除保存点
|
||
transaction.savepoint_commit(savepoint)
|
||
resdata = XCXLoginSerializer.get_token(user)
|
||
return SuccessResponse(data=resdata, msg="success")
|
||
|
||
|
||
|
||
|
||
|
||
#微信小程序更新（获取）用户信息wx.getUserInfo,用户解密获取的用户信息
|
||
class XCXWeChatUserInfoUpdateAPIView(APIView):
|
||
"""
|
||
post:
|
||
微信小程序更新用户信息
|
||
"""
|
||
permission_classes = [IsAuthenticated]
|
||
authentication_classes = [JWTAuthentication]
|
||
|
||
def post(self, request):
|
||
encryptedData = get_parameter_dic(request)['encryptedData']
|
||
iv = get_parameter_dic(request)['iv']
|
||
|
||
if not encryptedData:
|
||
return ErrorResponse(msg="encryptedData不能为空")
|
||
|
||
if not iv:
|
||
return ErrorResponse(msg="iv不能为空")
|
||
|
||
wechat_user = OAuthWXUser.objects.filter(user=request.user).first()
|
||
if not wechat_user:
|
||
return ErrorResponse(msg="无此用户")
|
||
|
||
pc = WeChatCrypt(WX_XCX_APPID, wechat_user.session_key)
|
||
|
||
user = pc.decrypt(encryptedData, iv)
|
||
wechat_user.nick = user['nickName']
|
||
wechat_user.sex = user['gender']
|
||
wechat_user.city = user['city']
|
||
wechat_user.avatarUrl = user['avatarUrl']
|
||
wechat_user.save()
|
||
myuser = request.user
|
||
myuser.nickname = user['nickName']
|
||
myuser.avatar = user['avatarUrl']
|
||
|
||
|
||
return SuccessResponse(data=user,msg="success")
|
||
|
||
|
||
# ================================================= #
|
||
# ************** 微信小程序生成推广小程序码view ************** #
|
||
# ================================================= #
|
||
#获取小程序的access_token
|
||
"""
|
||
正常返回，access_token 的有效期目前为 2 个小时，重复获取将导致上次获取的 access_token 失效
|
||
{"access_token":"ACCESS_TOKEN","expires_in":7200}
|
||
错误返回
|
||
{"errcode":40013,"errmsg":"invalid appid"}
|
||
"""
|
||
def get_wechat_xcx_access_token_url():
|
||
api_url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid={0}&secret={1}"
|
||
get_url = api_url.format(WX_XCX_APPID,WX_XCX_APPSECRET)
|
||
r = requests.get(get_url)
|
||
return r
|
||
|
||
#这个url生成二维码是无限个,返回的二维码是buffer类型(正式版小程序才能生成，体验版不行)
|
||
"""
|
||
正常返回
|
||
{
|
||
"errcode": 0,
|
||
"errmsg": "ok",
|
||
"contentType": "image/jpeg",
|
||
"buffer": Buffer
|
||
}
|
||
"""
|
||
def get_wechat_qrcode_url(access_token,scene,page,width=430,auto_color=True,is_hyaline=False):
|
||
if not page:
|
||
page = "pages/index/index"
|
||
api_url = 'https://api.weixin.qq.com/wxa/getwxacodeunlimit?access_token={0}'
|
||
get_url = api_url.format(access_token)
|
||
headers = {"Content-type":"application/json"}
|
||
data = dict(scene=scene,page=page,width=width,auto_color=auto_color,is_hyaline=is_hyaline)
|
||
r = requests.post(url=get_url,data=json.dumps(data),headers=headers)
|
||
return r
|
||
|
||
class GetXCXShareQrcodeView(APIView):
|
||
"""
|
||
post:
|
||
微信小程序获取推广二维码
|
||
scene 分享用户的userid
|
||
page 要跳转的页面
|
||
"""
|
||
permission_classes = [IsAuthenticated]
|
||
authentication_classes = [JWTAuthentication]
|
||
def post(self,request):
|
||
scene = get_parameter_dic(request)['scene']#分享用户的userid
|
||
page = get_parameter_dic(request)['page']
|
||
if scene is None or page is None:
|
||
return ErrorResponse("提交参数不能为空")
|
||
restoken = get_wechat_xcx_access_token_url()
|
||
if restoken.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试1")
|
||
json_data = json.loads(restoken.content)
|
||
if 'errcode' in json_data and json_data['errcode'] !=0: # 如果获取失败返回失败信息
|
||
return ErrorResponse(msg=json_data['errmsg'])
|
||
access_token = json_data['access_token']
|
||
res = get_wechat_qrcode_url(access_token,scene,page)
|
||
if res.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试2")
|
||
curr_time = datetime.datetime.now()
|
||
time_path = curr_time.strftime("%Y-%m-%d")
|
||
img_task_dir = "xcxqrcode"
|
||
image_name = renameuploadimg('_QRcode.png')
|
||
sub_path = os.path.join(settings.MEDIA_ROOT, img_task_dir, time_path)
|
||
if not os.path.exists(sub_path):
|
||
os.makedirs(sub_path)
|
||
image_path = os.path.join(sub_path, image_name)
|
||
web_img_url = DOMAIN_HOST + settings.MEDIA_URL + img_task_dir + "/" + time_path + "/" + image_name # 绝对路径http://xxx.xxx.com/media/xxx/xxxx/xxx.png
|
||
with open(image_path, 'wb') as f:
|
||
f.write(res.content)
|
||
json_data2 = web_img_url
|
||
return SuccessResponse(data=json_data2,msg="success")
|
||
|
||
|
||
# ================================================= #
|
||
# ************** 微信小程序发送服务通知消息 view ************** #
|
||
# ================================================= #
|
||
"""
|
||
1、form_id提交表单的id（支付时用）
|
||
2、data 提交的请求体
|
||
push_data={
|
||
"keyword1":{
|
||
"value":obj.order_sn
|
||
},
|
||
"keyword2":{
|
||
"value":obj.time
|
||
},
|
||
}
|
||
"""
|
||
def send_wx_xcx_message(access_token,openid,template_id,form_id,push_data):
|
||
api_url = "https://api.weixin.qq.com/cgi-bin/message/subscribe/send?access_token={0}"
|
||
get_url = api_url.format(access_token)
|
||
payload={
|
||
"touser": openid, #这里为用户的openid
|
||
"template_id": template_id, #模板id
|
||
"form_id": form_id, #表单id或者prepay_id
|
||
"data": push_data
|
||
}
|
||
r = requests.post(get_url,json=payload)
|
||
return r
|
||
|
||
def send_wx_xcx_message_cache(openid,template_id,form_id,push_data):
|
||
access_token = cache.get('xcx_access_token')
|
||
if access_token:#有缓存
|
||
res = send_wx_xcx_message(access_token,openid,template_id,form_id,push_data)
|
||
json_data = json.loads(res.content)
|
||
if 'errcode' in json_data: # 如果获取失败返回失败信息
|
||
if json_data['errcode'] == 40001:
|
||
restoken = get_wechat_xcx_access_token_url()
|
||
json_data1 = json.loads(restoken.content)
|
||
access_token1 = json_data1['access_token']
|
||
res1 = send_wx_xcx_message(access_token1, openid, template_id, form_id, push_data)
|
||
json_data2 = json.loads(res1.content)
|
||
if 'errcode' in json_data2 and json_data2['errcode'] !=0:
|
||
logger.error("微信小程序发送消息服务错误，用户openid:%s，template_id:%s，form_id:%s，data:%s，微信返回错误信息：%s"%(openid,template_id,form_id,push_data,json_data2))
|
||
return False
|
||
cache.set('xcx_access_token', access_token,7000)
|
||
return True
|
||
else:#无缓存
|
||
restoken = get_wechat_xcx_access_token_url()
|
||
json_data1 = json.loads(restoken.content)
|
||
access_token1 = json_data1['access_token']
|
||
res1 = send_wx_xcx_message(access_token1, openid, template_id, form_id, push_data)
|
||
json_data2 = json.loads(res1.content)
|
||
if 'errcode' in json_data2 and json_data2['errcode'] !=0:
|
||
logger.error("微信小程序发送消息服务错误，用户openid:%s，template_id:%s，form_id:%s，data:%s，微信返回错误信息：%s" % (
|
||
openid, template_id, form_id, push_data, json_data2))
|
||
return False
|
||
cache.set('xcx_access_token', access_token,7000)
|
||
return True
|
||
# ================================================= #
|
||
# ************** 微信公众号app授权登录 view ************** #
|
||
# ================================================= #
|
||
|
||
#通过 code 换取 access_token 和 openid,code为前端获取后传过来得
|
||
"""
|
||
正确返回
|
||
{
|
||
"access_token": "ACCESS_TOKEN", 有效期2小时
|
||
"expires_in": 7200,
|
||
"refresh_token": "REFRESH_TOKEN",有效期30天
|
||
"openid": "OPENID",
|
||
"scope": "SCOPE",
|
||
"unionid": "o6_bmasdasdsad6_2sgVt7hMZOPfL"
|
||
}
|
||
错误返回
|
||
{
|
||
"errcode": 40029,
|
||
"errmsg": "invalid code"
|
||
}
|
||
"""
|
||
def get_wechat_access_token_url(code):
|
||
api_url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid={0}&secret={1}&code={2}&grant_type=authorization_code"
|
||
get_url = api_url.format(WX_GZPT_APPID,WX_GZPT_APPSECRET,code)
|
||
r = requests.get(get_url)
|
||
return r
|
||
|
||
#获取微信用户公开个人信息
|
||
"""
|
||
正确返回
|
||
{
|
||
"openid": "OPENID",
|
||
"nickname": "NICKNAME",
|
||
"sex": 1,
|
||
"province": "PROVINCE",
|
||
"city": "CITY",
|
||
"country": "COUNTRY",
|
||
"headimgurl": "https://thirdwx.qlogo.cn/mmopen/g3MonUZtNHkdmzicIlibx6iaFqAc56vxLSUfpb6n5WKSYVY0ChQKkiaJSgQ1dZuTOgvLLrhJbERQQ4eMsv84eavHiaiceqxibJxCfHe/0",
|
||
"privilege": ["PRIVILEGE1", "PRIVILEGE2"],
|
||
"unionid": " o6_bmasdasdsad6_2sgVt7hMZOPfL"
|
||
}
|
||
错误返回
|
||
{
|
||
"errcode": 40003,
|
||
"errmsg": "invalid openid"
|
||
}
|
||
"""
|
||
def getWxUserInfo(access_token,openid):
|
||
api_url = "https://api.weixin.qq.com/sns/userinfo?access_token={0}&openid={1}&lang=zh_CN"
|
||
get_url = api_url.format(access_token,openid)
|
||
r = requests.get(get_url)
|
||
return r
|
||
|
||
#检验授权凭证access_token 是否有效
|
||
"""
|
||
有效返回
|
||
{
|
||
"errcode": 0,
|
||
"errmsg": "ok"
|
||
}
|
||
"""
|
||
def is_access_token_valid(access_token, openid):
|
||
api_url = "https://api.weixin.qq.com/sns/auth?access_token={0}&openid={1}"
|
||
get_url = api_url.format(access_token, openid)
|
||
r = requests.get(get_url)
|
||
return r
|
||
#通过refresh_token刷新过期的access_token
|
||
"""
|
||
有效返回
|
||
{
|
||
"access_token": "ACCESS_TOKEN",
|
||
"expires_in": 7200,
|
||
"refresh_token": "REFRESH_TOKEN",
|
||
"openid": "OPENID",
|
||
"scope": "SCOPE"
|
||
}
|
||
错误返回
|
||
{
|
||
"errcode": 40030,
|
||
"errmsg": "invalid refresh_token"
|
||
}
|
||
"""
|
||
def refresh_access_token(refresh_token):
|
||
api_url = "https://api.weixin.qq.com/sns/oauth2/refresh_token?appid={0}&grant_type=refresh_token&refresh_token={1}"
|
||
get_url = api_url.format(WX_GZPT_APPID,refresh_token)
|
||
r = requests.get(get_url)
|
||
return r
|
||
|
||
#微信公众号app登录接口
|
||
class WeChatGZHLoginAPIView(APIView):
|
||
"""
|
||
post:
|
||
微信公众号登录接口
|
||
微信公众号code获取openid和access_token
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
def post(self, request):
|
||
jscode = get_parameter_dic(request)['code']
|
||
if not jscode:
|
||
return ErrorResponse(msg="code不能为空")
|
||
resp = get_wechat_access_token_url(jscode)
|
||
openid = ""
|
||
unionid = ""
|
||
access_token = ""
|
||
refresh_token = ""
|
||
scope = None
|
||
if resp.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试")
|
||
json_data =json.loads(resp.content)
|
||
if 'errcode' in json_data and json_data['errcode'] !=0:#如果获取失败返回失败信息
|
||
logger.error("微信app登录服务错误，用户提交code:%s，微信返回错误信息：%s" % (jscode, json_data))
|
||
return ErrorResponse(msg=json_data['errmsg'])
|
||
|
||
openid = json_data['openid']
|
||
access_token = json_data['access_token']
|
||
refresh_token = json_data['refresh_token']
|
||
scope = json_data['scope']
|
||
if "unionid" in json_data:
|
||
unionid = json_data['unionid']
|
||
|
||
#判断用户是否存在(根据openID判断用户是否是第一次登陆)
|
||
user = Users.objects.filter(is_active=True,oauthwxuser__gzh_openid=openid).first()
|
||
if not user:#如果不存在则提示绑定用户关系
|
||
return ErrorResponse(code=301,data={'openid':openid,'is_bind':False},msg="无此用户，请先绑定")
|
||
|
||
#返回token
|
||
resdata = XCXLoginSerializer.get_token(user)
|
||
return SuccessResponse(data=resdata,msg="success")
|
||
|
||
|
||
class WeChatGZHBindAPIView(APIView):
|
||
"""
|
||
绑定微信用户
|
||
post:
|
||
绑定微信用户
|
||
微信公众号openid、mobile（绑定手机号）、code（验证码）
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
def post(self,request):
|
||
openid = get_parameter_dic(request)['openid']
|
||
mobile = get_parameter_dic(request)['mobile']
|
||
code = get_parameter_dic(request)['code']
|
||
# 验证手机号是否合法
|
||
if not re.match(REGEX_MOBILE, mobile):
|
||
return ErrorResponse(msg="请输入正确手机号")
|
||
# 判断短信验证码是否正确
|
||
redis_conn = get_redis_connection('verify_codes')
|
||
send_flag = redis_conn.get('sms_%s' % mobile) # send_flag的值为bytes，需要转换成str ,send_flag.decode()
|
||
if not send_flag: # 如果取不到标记，则说明验证码过期
|
||
return ErrorResponse(msg="短信验证码已过期")
|
||
else:
|
||
if str(send_flag.decode()) != str(code):
|
||
return ErrorResponse(msg="验证码错误")
|
||
|
||
user = Users.objects.filter(is_active=True,username=mobile,identity__contains=2,oauthwxuser__isnull=True).first()
|
||
if not user:#如果不存在
|
||
return ErrorResponse(msg="无法绑定，无此用户或已绑定")
|
||
OAuthWXUser.objects.create(user=user,gzh_openid=openid)
|
||
resdata = XCXLoginSerializer.get_token(user)
|
||
return SuccessResponse(data=resdata,msg="success")
|
||
|
||
# ================================================= #
|
||
# ************** 微信公众号H5网页授权登录 view ************** #
|
||
# ================================================= #
|
||
def get_wechat_access_token_h5_url(code):
|
||
api_url = "https://api.weixin.qq.com/sns/oauth2/access_token?appid={0}&secret={1}&code={2}&grant_type=authorization_code"
|
||
get_url = api_url.format(WX_GZH_APPID,WX_GZH_APPSECRET,code)
|
||
r = requests.get(get_url)
|
||
return r
|
||
|
||
#公众号获取js sdk调用需要的临时签名信息
|
||
class GetWeChatGZHH5JSSDKTempSignAPIView(APIView):
|
||
"""
|
||
公众号获取js sdk调用需要的临时签名信息
|
||
get:
|
||
公众号获取js sdk调用需要的临时签名信息
|
||
"""
|
||
authentication_classes = [JWTAuthentication]
|
||
permission_classes = [IsAuthenticated]
|
||
|
||
def get(self, request):
|
||
url = get_parameter_dic(request)['url']#参与临时签名需要前端传递自己当前页面的url地址
|
||
temp_sign_data = WxAppPay().get_gzh_h5_js_sign(url)
|
||
if not temp_sign_data:
|
||
return ErrorResponse(msg="获取失败，请稍后再试")
|
||
return DetailResponse(data=temp_sign_data)
|
||
|
||
#接口配置：校验微信发送的验证信息
|
||
class CheckWeChatGZHH5APIView(APIView):
|
||
"""
|
||
get:
|
||
接口配置：校验微信发送的验证信息
|
||
微信会发送随机字符，校验服务器是否真实存在
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
def get(self, request):
|
||
signature = get_parameter_dic(request)['signature']
|
||
timestamp = get_parameter_dic(request)['timestamp']
|
||
nonce = get_parameter_dic(request)['nonce']
|
||
echostr = get_parameter_dic(request)['echostr']
|
||
token = WX_GZH_TOKEN
|
||
if not wx_h5_checkSignature(token,timestamp, nonce, signature):
|
||
return HttpResponse('fail')
|
||
return HttpResponse(echostr)
|
||
|
||
def wx_h5_checkSignature(token, timestamp, nonce, signature):
|
||
temp = [token, timestamp, nonce]
|
||
temp.sort()
|
||
res = hashlib.sha1("".join(temp).encode('utf8')).hexdigest()
|
||
return True if res == signature else False
|
||
|
||
def wx_h5_checkSignature(token, timestamp, nonce, signature):
|
||
temp = [token, timestamp, nonce]
|
||
temp.sort()
|
||
res = hashlib.sha1("".join(temp).encode('utf8')).hexdigest()
|
||
return True if res == signature else False
|
||
|
||
|
||
#微信公众号H5网页授权登录接口
|
||
class WeChatGZHH5LoginAPIView(APIView):
|
||
"""
|
||
post:
|
||
微信公众号网页授权登录接口
|
||
微信公众号code获取openid和access_token，新用户获取用户信息（昵称头像等）：
|
||
引导用户访问例如如下授权链接：
|
||
https://open.weixin.qq.com/connect/oauth2/authorize?appid=wx9747c4bf89d5ce34&redirect_uri=http%3A%2F%2Fdvlyadmin.lybbn.cn%2Fapi%2Fxcx%2Fwxh5login%2F&response_type=code&scope=snsapi_userinfo&state=STATE#wechat_redirect
|
||
也可以使用拼接
|
||
redirect_uri = parse.quote("%s/api/h5/wxh5login/"%config.DOMAIN_HOST)
|
||
#snsapi_base\snsapi_userinfo
|
||
link = "https://open.weixin.qq.com/connect/oauth2/authorize?appid=%s&redirect_uri=%s&response_type=code&scope=snsapi_userinfo&state=%s#wechat_redirect"%(WX_GZH_APPID,redirect_uri,code)
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
def get(self, request):
|
||
jscode = get_parameter_dic(request)['code']
|
||
if not jscode:
|
||
return ErrorResponse(msg="code不能为空")
|
||
resp = get_wechat_access_token_h5_url(jscode)
|
||
openid = ""
|
||
unionid = ""
|
||
access_token = ""
|
||
refresh_token = ""
|
||
scope = None
|
||
if resp.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试")
|
||
json_data =json.loads(resp.content)
|
||
if 'errcode' in json_data and json_data['errcode'] !=0:#如果获取失败返回失败信息
|
||
logger.error("微信app登录服务错误，用户提交code:%s，微信返回错误信息：%s" % (jscode, json_data))
|
||
return ErrorResponse(msg=json_data['errmsg'])
|
||
|
||
openid = json_data['openid']
|
||
access_token = json_data['access_token']
|
||
refresh_token = json_data['refresh_token']
|
||
scope = json_data['scope']
|
||
if "unionid" in json_data:
|
||
unionid = json_data['unionid']
|
||
|
||
#判断用户是否存在(根据openID判断用户是否是第一次登陆)
|
||
user = Users.objects.filter(is_active=True,oauthwxuser__gzh_openid=openid).first()
|
||
if not user:#如果不存在则提示绑定用户关系
|
||
userinfo_res = getWxUserInfo(access_token, openid)
|
||
userinfo = json.loads(userinfo_res.content)
|
||
if 'errcode' in userinfo and userinfo['errcode'] != 0: # 如果获取失败返回失败信息
|
||
logger.error("微信公众号网页授权登录服务错误，用户提交code:%s，微信返回错误信息：%s" % (jscode, userinfo))
|
||
return ErrorResponse(msg=userinfo['errmsg'])
|
||
nickname = userinfo['nickname']
|
||
sex = userinfo['sex']
|
||
if "unionid" in userinfo:
|
||
unionid = userinfo['unionid']
|
||
avatar = userinfo['headimgurl']
|
||
user = Users.objects.create(username=openid,password=uuid.uuid4(),is_staff=False,is_active=True,nickname=nickname,name=nickname,avatar=avatar,gender=sex)
|
||
OAuthWXUser.objects.create(user=user, gzh_openid=openid,avatarUrl=avatar,nick=nickname,sex=sex,gzh_access_token=access_token)
|
||
|
||
#返回token
|
||
resdata = XCXLoginSerializer.get_token(user)
|
||
return SuccessResponse(data=resdata,msg="success")
|
||
|
||
# ================================================= #
|
||
# ************** 字节跳动小程序登录 view ************** #
|
||
# ================================================= #
|
||
#接口调用凭证getAccessToken，获取的access_token有效期2 小时，重复获取 access_token 会导致上次 access_token 失效。为了平滑过渡，新老 access_token 在 5 分钟内都可使用
|
||
def get_tt_access_token():
|
||
"""
|
||
正确返回信息：
|
||
{
|
||
"err_no": 0,
|
||
"err_tips": "success",
|
||
"data": {
|
||
"access_token": "0801121***********",
|
||
"expires_in": 7200
|
||
}
|
||
}
|
||
"""
|
||
api_url = "https://developer.toutiao.com/api/apps/v2/token"
|
||
headers = {'Content-Type': 'application/json'}
|
||
data = {'appid':TT_XCX_APPID,'secret':TT_XCX_APPSECRET,'grant_type':'client_credential'}
|
||
r = requests.post(url=api_url,data=json.dumps(data),headers=headers)
|
||
return r
|
||
#获取字节跳动code2Session（返回值有openid）
|
||
def get_tt_code2Session(code):
|
||
"""
|
||
code：为前端小程序通过tt.login传过来的code
|
||
小程序正确返回信息：
|
||
{
|
||
"err_no": 0,
|
||
"err_tips": "success",
|
||
"data": {
|
||
"session_key": "hZy6t19VPjFqm********",
|
||
"openid": "V3WvSshYq9******",
|
||
"anonymous_openid": "",
|
||
"unionid": "f7510d9ab***********"
|
||
}
|
||
}
|
||
"""
|
||
api_url = 'https://developer.toutiao.com/api/apps/v2/jscode2session'
|
||
headers = {'Content-Type': 'application/json'}
|
||
data = {'appid': TT_XCX_APPID, 'secret': TT_XCX_APPSECRET, 'code': code}
|
||
r = requests.post(url=api_url, data=json.dumps(data), headers=headers)
|
||
return r
|
||
|
||
#字节跳动小程序登录接口
|
||
class TTXCXLoginAPIView(APIView):
|
||
"""
|
||
post:
|
||
字节跳动小程序登录接口
|
||
字节跳动小程序code获取openid
|
||
"""
|
||
permission_classes = []
|
||
authentication_classes = []
|
||
|
||
@transaction.atomic # 开启事务,当方法执行完成以后，自动提交事务
|
||
def post(self, request):
|
||
jscode = get_parameter_dic(request)['code']
|
||
nickname = get_parameter_dic(request)['nickname']
|
||
avatar_url = get_parameter_dic(request)['avatar_url']
|
||
gender = get_parameter_dic(request)['gender']
|
||
if not jscode:
|
||
return ErrorResponse(msg="code不能为空")
|
||
resp = get_tt_code2Session(jscode)
|
||
openid = None
|
||
session_key = None
|
||
unionid = None
|
||
if resp.status_code != 200:
|
||
return ErrorResponse(msg="服务器到微信网络连接失败，请重试")
|
||
# json_data = {'errcode':0,'openid':'111','session_key':'test'}
|
||
json_data =json.loads(resp.content)
|
||
if not int(json_data['err_no']) ==0:#如果获取失败返回失败信息
|
||
print(json_data)
|
||
return ErrorResponse(msg=json_data['err_tips'])
|
||
|
||
openid = json_data['data']['openid']
|
||
session_key = json_data['data']['session_key']
|
||
|
||
if "unionid" in json_data:
|
||
unionid = json_data['data']['unionid']
|
||
|
||
# 判断用户是否存在
|
||
try:
|
||
wxuser = Users.objects.get(username=openid)
|
||
if not wxuser.is_active:
|
||
return ErrorResponse(msg="该用户已禁用，请联系管理员")
|
||
wxuser.oauthwxuser.session_key = session_key # 小写oauthwxuser 表示关联的外键
|
||
wxuser.oauthwxuser.xcx_openid = openid
|
||
wxuser.oauthwxuser.unionId = unionid
|
||
wxuser.oauthwxuser.avatarUrl = avatar_url
|
||
wxuser.oauthwxuser.sex = gender
|
||
wxuser.oauthwxuser.nick = nickname
|
||
wxuser.oauthwxuser.save()
|
||
wxuser.nickname = nickname
|
||
wxuser.avatar = avatar_url
|
||
wxuser.gender = gender
|
||
wxuser.save()
|
||
resdata = XCXLoginSerializer.get_token(wxuser)
|
||
return SuccessResponse(data=resdata, msg="success")
|
||
except Exception as e: # 新用户
|
||
with transaction.atomic():
|
||
try:
|
||
savepoint = transaction.savepoint()
|
||
user = Users()
|
||
user.username = openid
|
||
user.password = uuid.uuid4() # 先随机生成一个密码，防止别人获取openid直接被登录情况
|
||
user.identity = 2 # 用户身份2表示前端用户
|
||
user.nickname = nickname
|
||
user.name = nickname
|
||
user.avatar = avatar_url
|
||
user.save()
|
||
OAuthWXUser.objects.create(user=user, session_key=session_key, xcx_openid=openid,avatarUrl=avatar_url, sex=gender, nick=nickname)
|
||
except Exception as e:
|
||
transaction.savepoint_rollback(savepoint)
|
||
return ErrorResponse(msg=str(e))
|
||
# 清除保存点
|
||
transaction.savepoint_commit(savepoint)
|
||
resdata = XCXLoginSerializer.get_token(user)
|
||
return SuccessResponse(data=resdata, msg="success") |