django实现微信公众号扫码登录

首先是去获取access_token,access_token接口有次数限制，所以保存到缓存，失效时再去调用接口

import base64
import json
import time
import traceback

import requests
from django.core.cache import cache
from rest_framework.response import Response
from rest_framework.views import APIView

app_id = 'xxxxxxx'  # appid
app_secret = 'xxxxxx'   # app密钥
msg_key = 'xxxxxx'  # 消息模板id
app_token = "xxxxxxx"   # apptoken

def get_wx_access_token():
    """
    获取access_token，保存到缓存
    :return:
    """
    url = 'https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid={0}&secret={1}'.format(app_id, app_secret)
    resp = requests.get(url)
    # print(resp.json())
    access_token = resp.json()['access_token']
    cache.set('wx_access_token', access_token, 60*60*2)
    # print(access_token)
    return access_token

def get_ticket(access_token, scene_str=''):
    """
    获取ticket
    :param access_token:
    :param scene_str:
    :return:
    """

    url = 'https://api.weixin.qq.com/cgi-bin/qrcode/create?access_token={0}'.format(access_token)
    # print(scene_id)
    data = {
        "expire_seconds": 604800,
        "action_name": "QR_STR_SCENE",
        "action_info": {"scene": {'scene_str': scene_str}}  # 一定要取字符串，整形有最大值限制
    }
    resp = requests.post(url, data=json.dumps(data))
    # print(resp.json())
    ticket = resp.json()['ticket']
    return ticket

def get_code_img(ticket):
    """
    获取二维码，保存位图片
    :param ticket:
    :return:
    """
    url = 'https://mp.weixin.qq.com/cgi-bin/showqrcode?ticket=' + ticket
    resp = requests.get(url)
    # print(resp.content)
    img = base64.b64encode(resp.content).decode('ascii')
    fileData = base64.urlsafe_b64decode(img.encode('UTF-8'))
    with open('thefilename.png', 'wb') as theFile:
        theFile.write(fileData)
    # print(img)
    return img

from rest_framework.throttling import AnonRateThrottle

# 限制调用次数
class CustomAnonRateThrottle(AnonRateThrottle):
    THROTTLE_RATES = {"anon": "5/min"}

# 获取二维码
class WxGetCode(APIView):
    throttle_classes = [CustomAnonRateThrottle]

    def get(self, request):

        # cache.delete('wx_access_token')
        # body = request.query_params.dict()
        # scene_id = get_json_values('scene_id', body, 1)
        scene_str = str(int(time.time()*100000))
        # print(scene_str)
        access_token = cache.get('wx_access_token') if cache.get('wx_access_token') else get_wx_access_token()
        ticket = get_ticket(access_token, scene_str)
        # code_img = get_code_img(ticket)

        code_url = 'https://mp.weixin.qq.com/cgi-bin/showqrcode?ticket=' + ticket

        resp = {'data': code_url, 'sceneStr': scene_str}
        return Response(resp)

下面get请求是公众号回调时需要验证token的接口，post请求是扫码完成以后回调的接口

微信回调的是xml形式，需要让django允许解析xml格式参数

import datetime
import hashlib
import time
import traceback

import requests
from django.core.cache import cache
from django.http import HttpResponse
from rest_framework.response import Response
from rest_framework.views import APIView
from rest_framework_xml.parsers import XMLParser

from wxgetcode import get_wx_access_token, app_token, msg_key

class TextXMLParser(XMLParser):
    media_type = 'text/xml'
# 

class weixin(APIView):
    parser_classes = (TextXMLParser,)

    def get(self, request):
        # 自己写的授权
        # print(request.method)
        data = request.GET
        # print(data)
        signature = data.get("signature")
        # print(signature)
        if not signature:
            return HttpResponse("dasdfafd")
        # print("sign", signature)
        timestamp = data.get("timestamp")
        nonce = data.get("nonce")
        echostr = data.get("echostr")
        # token 为用户在微信公众平台自定义token
        token = app_token
        # 将token、timestamp、nonce三个参数进行字典序排序
        list = [token, timestamp, nonce]
        list.sort()
        # 将三个参数字符串拼接成一个字符串进行sha1加密
        info = "".join(list)
        sha1 = hashlib.sha1()
        sha1.update(info.encode())
        hashcode = sha1.hexdigest()
        # 比对相同就返回 echostr
        if hashcode == signature:
            return HttpResponse(echostr)
        else:
            return ""

    def post(self, request):

        param = request.query_params.dict()
        # print(param)
        dic = request.data
        # EventKey场景码，获取二维码时返回的sceneStr
        EventKey = dic.get('EventKey')
        if dic.get('MsgType') == 'event':

            if dic.get('Event') == 'subscribe':
                # print('新用户')
                # parse_subscribe(dic)  # 新关注用户扫码
                access_token = cache.get('wx_access_token') if cache.get(
                    'wx_access_token') else get_wx_access_token()
                open_id = param.get('openid')
                # print(access_token)
                # print(open_id)
                url = f"https://api.weixin.qq.com/cgi-bin/user/info?access_token={access_token}&openid={open_id}&lang=zh_CN"
                res = requests.get(url)
                # print(res.json())
                res = res.json()
                unionid = res.get('unionid')

                # 处理逻辑
                pass

                # 完成登录公众号推送消息
                send_wx_msg(access_token, open_id)

            elif dic.get('Event') == 'SCAN':
                # print('老用户')
                access_token = cache.get('wx_access_token') if cache.get('wx_access_token') else get_wx_access_token()
                open_id = param.get('openid')
                # print(access_token)
                # print(open_id)
                url = f"https://api.weixin.qq.com/cgi-bin/user/info?access_token={access_token}&openid={open_id}&lang=zh_CN"
                res = requests.get(url)
                # print(res.json())
                res = res.json()
                unionid = res.get('unionid')
                # parse_scan(dic)  # 已经关注用户扫码

                # 处理逻辑
                pass

                # 完成登录公众号推送消息
                send_wx_msg(access_token, open_id)

        resp = 'success'
        return HttpResponse(resp)

def send_wx_msg(ACCESS_TOKEN, openid):
    """
    消息推送，根据消息模板的定义传值即可
    :param ACCESS_TOKEN:
    :param openid:
    :return:
    """
    url = f'https://api.weixin.qq.com/cgi-bin/message/template/send?access_token={ACCESS_TOKEN}'
    data = {
        "touser": openid,
        "template_id": msg_key,
        "url": "http://weixin.qq.com/download",
        "topcolor": "#FF0000",
        "data": {
            'character_string3': {'value': 'xxxxxxx', "color": "#173177"},
            'thing2': {'value': 'xxx', "color":"#173177"},
            'keyword2': {'value': 'ssss', "color": "#173177"},
            'time4': {'value': datetime.datetime.now().strftime('%Y-%m-%d %H:%M:%S'), "color": "#173177"},

            'keyword5': {'value': 'ssss', "color": "#173177"},

        }
        }
    res = requests.post(url, json=data)
    # print(res.json())