微信公众号授权登录，整合spring security

公司的业务需求，对接了微信公众号授权，通过微信公众号的接口拿到用户信息进行业务系统的登录，话不多说上代码，我的实现方式是整合了spingSecurity

首先是接口

    @PostMapping("/official/login")
    @ApiOperation(value = "公众号授权登录", notes = "此接口返回系统的token")
    public AjaxResult officialLogin(@RequestBody String code){
        AjaxResult ajax = AjaxResult.success();
        String token = mobileLoginService.officialLogin(code);
        ajax.put(Constants.TOKEN, token);
        return ajax;
    }

然后是service

/**
     * 公众号登录
     * @param code 授权码
     * @return token
     */
    public String officialLogin(String code) {
        // 用户验证
        Authentication authentication = null;
        try {
            MobileUserByOfficialAuthenticationToken officialAuthenticationToken =
                    new MobileUserByOfficialAuthenticationToken(code);
            AuthenticationContextHolder.setContext(officialAuthenticationToken);
            // 该方法会去调用MobileUserByOfficialDetailsServiceImpl.loadUserByUsername
            authentication = authenticationManager.authenticate(officialAuthenticationToken);
        } catch (Exception e) {
            if (e instanceof BadCredentialsException) {
                throw new UserPasswordNotMatchException();
            } else {
                throw new ServiceException(e.getMessage());
            }
        } finally {
            AuthenticationContextHolder.clearContext();
        }
        MobileLoginUser mobileLoginUser = (MobileLoginUser) authentication.getPrincipal();
        recordLoginInfo(mobileLoginUser.getUserId());
        return tokenService.createToken(mobileLoginUser);
    }

这里开始涉及到spring security，自定义一个MobileUserByOfficialAuthenticationToken ，用于authenticationManager找到合适的authenticationProvider来处理请求

/**
 * @Description : 移动用户-公众号登录
 * @Author : wzkris
 * @Version : V1.0.0
 * @Date : 2022/12/14 17:30
 */
public class MobileUserByOfficialAuthenticationToken extends AbstractAuthenticationToken {

    private final String code;

    /**
     * Creates a token with the supplied array of authorities.
     */
    public MobileUserByOfficialAuthenticationToken(String code) {
        super(null);
        this.code = code;
    }

    /**
     * @return 公众号授权需要的code
     */
    public String getCode() {
        return code;
    }

    @Override
    public Object getCredentials() {
        return null;
    }

    @Override
    public Object getPrincipal() {
        return null;
    }
}

/**
 * @Description : 公众号登录验证器
 * @Author : wzkris
 * @Version : V1.0.0
 * @Date : 2022/12/14 17:33
 */
@Component
public class MobileUserByOfficialAuthenticationProvider implements AuthenticationProvider {

    @Resource(name = "mobileUserByOfficialDetailsServiceImpl")
    private UserDetailsService userDetailsService;

    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        MobileUserByOfficialAuthenticationToken authenticationToken = (MobileUserByOfficialAuthenticationToken) authentication;
        UserDetails userDetails = userDetailsService.loadUserByUsername(authenticationToken.getCode());
        //微信授权登录，无密码
        return new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());
    }

    @Override
    public boolean supports(Class<?> authentication) {
        return MobileUserByOfficialAuthenticationToken.class.equals(authentication);
    }
}

下面的是具体请求微信拿到openId的方法

/**
 * @Description : 微信公众号登录服务
 * @Author : wzkris
 * @Version : V1.0.0
 * @Date : 2022/12/14 17:35
 */
@Service
public class MobileUserByOfficialDetailsServiceImpl implements UserDetailsService {

    @Resource
    private RestTemplate restTemplate;

    @Resource
    private MobileUserWechatService mobileUserWechatService;

    @Resource
    private MobileUserService mobileUserService;

    @Resource
    private ISysConfigService configService;

    @Resource
    private WxOfficialService wxOfficialService;

    @Resource
    private TransactionTemplate transactionTemplate;

    @Override
    public UserDetails loadUserByUsername(String code) throws UsernameNotFoundException {
        //获取请求token
        OfficialAccessResult loginAccessToken = wxOfficialService.getLoginAccessToken(code);
        //构造请求
        String url = "https://api.weixin.qq.com/sns/userinfo" +
                "?access_token=" + loginAccessToken.getAccessToken()
                + "&openid=" + loginAccessToken.getOpenId()
                + "&lang=zh_CN";
        ResponseEntity<OfficialLoginResult> response = restTemplate.getForEntity(URI.create(url), OfficialLoginResult.class);
        OfficialLoginResult loginResult = response.getBody();
        //校验返回结果
        Objects.requireNonNull(loginResult);
        WxErrCodeUtils.checkResult(loginResult);
        //业务逻辑
        MobileUserWechat userWechat = mobileUserWechatService.queryByOpenId(loginResult.getOpenId());
        //不为空则代表已经注册过,直接查询出来返回
        if (ObjectUtils.isNotEmpty(userWechat)) {
            MobileUser user = mobileUserService.getById(userWechat.getUserId());
            return createLoginUser(user);
        }
        //否则就代表第一次登录，直接插入并且注册
        String password = configService.selectConfigByKey("sys.user.initPassword");

        MobileUser user = new MobileUser()
                .setPassword(SecurityUtils.encryptPassword(password))
                .setUsername(IdUtils.fastSimpleUUID())
                .setNickname(loginResult.getNickname())
                .setAvatar(loginResult.getHeadImgUrl())
                .setSex(exchangeSex(loginResult.getSex()))
                .setPhone(Constants.UNKNOWN);
        //开启事务，保存用户和微信信息
        transactionTemplate.execute(status -> {
            mobileUserService.save(user);
            mobileUserWechatService.save(new MobileUserWechat()
                    .setOpenId(loginAccessToken.getOpenId())
                    .setUnionId(loginAccessToken.getUnionId())
                    .setChannel(Constants.CHANNEL_OFFICIAL)
                    .setUserId(user.getId()));
            return null;
        });
        return createLoginUser(user);
    }

    private UserDetails createLoginUser(MobileUser user) {
        return new MobileLoginUser(user, Constants.CHANNEL_OFFICIAL);
    }

    /**
     * @param sex 性别
     * @return 微信性别转换成系统的性别
     */
    private int exchangeSex(int sex) {
        int real = sex - 1;
        if (real < 0) {
            return 2;
        }
        return real;
    }

}