使用django钉钉第三方扫码登录
钉钉作为阿里旗下的一款免费移动通讯软件,受众群体越来越多,这里我们使用Django来集成一下钉钉的三方账号登录,首先注册钉钉开发平台:https://open-dev.dingtalk.com/
在移动应用中选择登录
创建一个网站应用,其中有用的信息是 appid , appsecret ,还有回调网址
随后,查看官方文档,查看如何构造登录url:https://ding-doc.dingtalk.com/doc#/serverapi2/kymkv6
这里我们用django视图来操作
#构造钉钉登录url
def ding_url(request):
appid = 'dingoaukgkwqknzjvamdqh'
redirect_uri = 'http://localhost:8000/dingding_back/'
return redirect('https://oapi.dingtalk.com/connect/qrconnect?appid='+appid+'&response_type=code&scope=snsapi_login&state=STATE&redirect_uri='+redirect_uri)
然后访问 http://localhost:8000/ding_url , 就可以进行扫码
随后,钉钉会将code返回到回调网址中,查看官方文档,只有 java 和 php 的 sdk,并没有python的
SDK请求示例(JAVA):
DefaultDingTalkClient client = new DefaultDingTalkClient("https://oapi.dingtalk.com/sns/getuserinfo_bycode");
OapiSnsGetuserinfoBycodeRequest req = new OapiSnsGetuserinfoBycodeRequest();
req.setTmpAuthCode("4a2c5695b78738d495f47b5fee9160cd");
OapiSnsGetuserinfoBycodeResponse response = client.execute(req,"yourAppId","yourAppSecret");
SDK请求示例(PHP):
include "TopSdk.php";
$c = new DingTalkClient(DingTalkConstant::$CALL_TYPE_OAPI, DingTalkConstant::$METHOD_POST , DingTalkConstant::$FORMAT_JSON);
$req = new OapiSnsGetuserinfoBycodeRequest;
$req->setTmpAuthCode("4a2c5695b78738d495f47b5fee9160cd");
$resp=$c->executeWithAccessKey($req, "https://oapi.dingtalk.com/sns/getuserinfo_bycode","yourAppId","yourAppSecret");
var_dump($resp)
python 逻辑很简单,将时间戳,秘钥进行hmac加密即可
# 构造钉钉回调方法
# 导包:
import hmac
import base64
from hashlib import sha256
import urllib
import json
def ding_url(request):
appid = 'dingoadckiwhdceemaxrza',
redirect_uri = 'http://127.0.0.1:8000/ding_url'
# 获取code
code = request.GET.get("code")
t = time.time()
# 时间戳
timestamp = str((int(round(t * 1000))))
# 密钥
appSecret = 'Uym9ecJfNF4vlQ9-8wAGl2J10GvyZNKJqiXvcuf0blp7ERTpWrif8IwWk_AGI1j-'
# 构造签名
signature = base64.b64encode(
hmac.new(appSecret.encode('utf-8'), timestamp.encode('utf-8'), digestmod=sha256).digest())
# 请求接口,换取钉钉用户名
payload = {'tmp_auth_code': code}
headers = {'Content-Type': 'application/json'}
# parse(alt+回车 第二个 导包)
res = requests.post('https://oapi.dingtalk.com/sns/getuserinfo_bycode?signature=' + urllib.parse.quote(
signature.decode("utf-8")) + "×tamp=" + timestamp + "&accessKey=dingoadckiwhdceemaxrza",
data=json.dumps(payload), headers=headers)
res_dict = json.loads(res.text)
print(res_dict)
访问一下,可以显示出钉钉的用户名
vue与django结合 钉钉第三放登录
//vue登录页面内点击事件
//钉钉登录
dingding() {
//拼接钉钉url
let url = "https://oapi.dingtalk.com/connect/qrconnect?appid=dingoadckiwhdceemaxrza&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=http://127.0.0.1:8000/ding_url"
//进行站外跳转
window.location.href = url;
},
django视图页面:
# 导包:
import hmac
import base64
from hashlib import sha256
import urllib
import json
def ding_url(request):
appid = 'dingoadckiwhdceemaxrza',
redirect_uri = 'http://127.0.0.1:8000/ding_url'
# 'https: // oapi.dingtalk.com / connect / qrconnect?appid =dingoamo0tezhk5hsckrrk & response_type = code & scope = snsapi_login & state = STATE & redirect_uri =http://localhost:8000/dingding_back/'
# 获取code
code = request.GET.get("code")
t = time.time()
# 时间戳
timestamp = str((int(round(t * 1000))))
appSecret = 'Uym9ecJfNF4vlQ9-8wAGl2J10GvyZNKJqiXvcuf0blp7ERTpWrif8IwWk_AGI1j-'
# 构造签名
signature = base64.b64encode(
hmac.new(appSecret.encode('utf-8'), timestamp.encode('utf-8'), digestmod=sha256).digest())
# 请求接口,换取钉钉用户名
payload = {'tmp_auth_code': code}
headers = {'Content-Type': 'application/json'}
# parse(alt+回车 第二个 导包)
res = requests.post('https://oapi.dingtalk.com/sns/getuserinfo_bycode?signature=' + urllib.parse.quote(
signature.decode("utf-8")) + "×tamp=" + timestamp + "&accessKey=dingoadckiwhdceemaxrza",
data=json.dumps(payload), headers=headers)
res_dict = json.loads(res.text)
#判断是否为第一次登录
user = models.User.objects.filter(username=str(res_dict['user_info']['nick'])).first()
sina_name = ''
user_id = ''
# 代表曾经登陆
if user:
sina_name = user.username
user_id = user.id
else:
# 首次登录 建立账号保存到数据库
models.User(username=str(res_dict['user_info']['nick']), password=make_password(''), type=0).save()
print('已创建钉钉账户')
# 查询用户
user = models.User.objects.filter(username=str(res_dict['user_info']['nick'])).first()
sina_name = res_dict['user_info']['nick']
user_id = user.id
# 进行跳转
return redirect("http://localhost:8080?sina_name=" + str(sina_name) + "&uid=" + str(user_id))