jssdk.php 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. <?php
  2. /**
  3. * 微信JS-SDK(微信官网下载的demo)
  4. *
  5. * https://mp.weixin.qq.com/wiki?t=resource/res_main&id=mp1421141115
  6. *
  7. */
  8. namespace app\common\library;
  9. class jssdk {
  10. private $appId;
  11. private $appSecret;
  12. protected $errMsg;
  13. public function __construct($appId, $appSecret) {
  14. $this->appId = $appId;
  15. $this->appSecret = $appSecret;
  16. }
  17. public function getSignPackage() {
  18. $jsapiTicket = $this->getJsApiTicket();
  19. if(empty($jsapiTicket)){
  20. return false;
  21. }
  22. // 注意 URL 一定要动态获取,不能 hardcode.
  23. $protocol = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) ? "https://" : "http://";
  24. $url = "$protocol$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
  25. $timestamp = time();
  26. $nonceStr = $this->createNonceStr();
  27. // 这里参数的顺序要按照 key 值 ASCII 码升序排序
  28. $string = "jsapi_ticket=$jsapiTicket&noncestr=$nonceStr&timestamp=$timestamp&url=$url";
  29. $signature = sha1($string);
  30. $signPackage = array(
  31. "appId" => $this->appId,
  32. "nonceStr" => $nonceStr,
  33. "timestamp" => $timestamp,
  34. "url" => $url,
  35. "signature" => $signature,
  36. "rawString" => $string
  37. );
  38. return $signPackage;
  39. }
  40. private function createNonceStr($length = 16) {
  41. $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
  42. $str = "";
  43. for ($i = 0; $i < $length; $i++) {
  44. $str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
  45. }
  46. return $str;
  47. }
  48. private function getJsApiTicket() {
  49. $ticket = false;
  50. if (session('jssdk') && isset(session('jssdk')['jsapi_ticket']) && session('jssdk')['ticket_expire_time'] > time()) {
  51. $ticket = session('jssdk')['jsapi_ticket'];
  52. } else {
  53. $accessToken = $this->getAccessToken();
  54. if(empty($accessToken)){
  55. return false;
  56. }
  57. // 如果是企业号用以下 URL 获取 ticket
  58. //$url = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=$accessToken";
  59. $url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
  60. $res = json_decode($this->httpGet($url));
  61. if(isset($res->ticket)){
  62. $ticket = $res->ticket;
  63. if ($ticket) {
  64. $data['jsapi_ticket'] = $ticket;// session
  65. $data['ticket_expire_time'] = time() + 7000;
  66. session('jssdk',$data);
  67. }
  68. }
  69. else{
  70. $this->errMsg = 'jsapi_ticket获取失败'.$res->errcode;
  71. }
  72. }
  73. return $ticket;
  74. }
  75. private function getAccessToken() {
  76. $access_token = '';
  77. if (session('jssdk') && isset(session('jssdk')['access_token']) && session('jssdk')['token_expire_time'] > time()) {
  78. return session('jssdk')['access_token'];
  79. } else {
  80. $url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
  81. $res = json_decode($this->httpGet($url));
  82. if(isset($res->access_token)){
  83. $access_token = $res->access_token;
  84. if ($access_token) {
  85. session('jssdk')['access_token'] = $access_token;
  86. session('jssdk')['token_expire_time'] = time() + 7000;
  87. return $access_token;
  88. }
  89. }
  90. else{
  91. $this->errMsg = 'access_token获取失败'.$res->errcode;
  92. }
  93. }
  94. return $access_token;
  95. }
  96. private function httpGet($url) {
  97. $curl = curl_init();
  98. curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
  99. curl_setopt($curl, CURLOPT_TIMEOUT, 500);
  100. // 为保证第三方服务器与微信服务器之间数据传输的安全性,所有微信接口采用https方式调用,必须使用下面2行代码打开ssl安全校验。
  101. // 如果在部署过程中代码在此处验证失败,请到 http://curl.haxx.se/ca/cacert.pem 下载新的证书判别文件。
  102. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);
  103. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 2);
  104. curl_setopt($curl, CURLOPT_URL, $url);
  105. $res = curl_exec($curl);
  106. curl_close($curl);
  107. return $res;
  108. }
  109. /**
  110. * 获取错误信息
  111. * @return string
  112. */
  113. public function getError()
  114. {
  115. return $this->errMsg;
  116. }
  117. }