PHP实现QQ快速登录的方法

//应用的appid 
   $app_id = "你的appid"; 
   //应用的appkey 
   $app_secret = "你的appkey"; 
   //【成功授权】后的回调地址，即此地址在腾讯的信息中有储存 
   $my_url = "你的回调网址"; 
 
   //step1：获取authorization code 
   session_start(); 
   $code = $_request["code"];//存放authorization code 
   if(empty($code)) 
   { 
    //state参数用于防止csrf攻击，成功授权后回调时会原样带回 
    $_session['state'] = md5(uniqid(rand(), true)); 
    //拼接url 
    $dialog_url = "https://graph.qq.com/oauth2.0/authorize?response_type=code&client_id=" 
     . $app_id . "&redirect_uri=" . urlencode($my_url) . "&state=" 
     . $_session['state']; 
    echo("<script> top.location.href='" . $dialog_url . "'</script>"); 
   } 
 
   //step2：通过authorization code获取access token 
   if($_request['state'] == $_session['state'] || 1) 
   { 
    //拼接url 
    $token_url = "https://graph.qq.com/oauth2.0/token?grant_type=authorization_code&" 
     . "client_id=" . $app_id . "&redirect_uri=" . urlencode($my_url) 
     . "&client_secret=" . $app_secret . "&code=" . $code; 
    $response = file_get_contents($token_url); 
    if (strpos($response, "callback") !== false)//如果登录用户临时改变主意取消了，返回true!==false,否则执行step3 
    { 
     $lpos = strpos($response, "("); 
     $rpos = strrpos($response, ")"); 
     $response = substr($response, $lpos + 1, $rpos - $lpos -1); 
     $msg = json_decode($response); 
     if (isset($msg->error)) 
     { 
      echo "<h3>error:</h3>" . $msg->error; 
      echo "<h3>msg :</h3>" . $msg->error_description; 
      exit; 
     } 
    } 
 
    //step3：使用access token来获取用户的openid 
    $params = array(); 
    parse_str($response, $params);//把传回来的数据参数变量化 
    $graph_url = "https://graph.qq.com/oauth2.0/me?access_token=".$params['access_token']; 
    $str = file_get_contents($graph_url); 
    if (strpos($str, "callback") !== false) 
    { 
     $lpos = strpos($str, "("); 
     $rpos = strrpos($str, ")"); 
     $str = substr($str, $lpos + 1, $rpos - $lpos -1); 
    } 
    $user = json_decode($str);//存放返回的数据 client_id ，openid 
    if (isset($user->error)) 
    { 
     echo "<h3>error:</h3>" . $user->error; 
     echo "<h3>msg :</h3>" . $user->error_description; 
     exit; 
    } 
    //echo("hello " . $user->openid); 
    //echo("hello " . $params['access_token']); 
 
    //step4：使用<span style="font-family: arial, helvetica, sans-serif;">openid,</span><span style="font-family: arial, helvetica, sans-serif;">access_token来获取所接受的用户信息。</span> 
    $user_data_url = "https://graph.qq.com/user/get_user_info?access_token={$params['access_token']}&oauth_consumer_key={$app_id}&openid={$user->openid}&format=json"; 
     
    $user_data = file_get_contents($user_data_url);//此为获取到的user信息 
    } 
    else 
    { 
     echo("the state does not match. you may be a victim of csrf."); 
    } 

$qq_login = new \component\qq_loginaction();    //引入此类文件即可 
$qq_login->qq_login();          //调用登录方法，向腾讯发出快速登录请求 

$qc = new \component\qq_loginaction(); 
$acs = $qc->qq_callback();<span style="white-space:pre">    //access_token 
$oid=$qc->get_openid();<span style="white-space:pre">     //openid 
$user_data = $qc->get_user_info();<span style="white-space:pre">  //get_user_info()为获得该用户的信息，其他操作方法见api文档 

<?php 
namespace component; 
 
session_start(); 
define('appid','xxxx');   //appid 
define('appkey','xxxx');  //appkey 
define('callback','xxxx');  //回调地址 
define('scope','get_user_info,list_album,add_album,upload_pic,add_topic,add_weibo');  //授权接口列表 
class qq_loginaction { 
 const get_auth_code_url = "https://graph.qq.com/oauth2.0/authorize"; 
 const get_access_token_url = "https://graph.qq.com/oauth2.0/token"; 
 const get_openid_url = "https://graph.qq.com/oauth2.0/me"; 
 private $apimap = array( 
  "get_user_info" => array(   //获取用户资料 
   "https://graph.qq.com/user/get_user_info", 
   array("format" => "json"), 
  ), 
  "add_t" => array(    //发布一条普通微博 
   "https://graph.qq.com/t/add_t", 
   array("format" => "json", "content","#clientip","#longitude","#latitude","#compatibleflag"), 
   "post" 
  ), 
  "add_pic_t" => array(    //发布一条图片微博 
   "https://graph.qq.com/t/add_pic_t", 
   array("content", "pic", "format" => "json", "#clientip", "#longitude", "#latitude", "#syncflag", "#compatiblefalg"), 
   "post" 
  ), 
  "del_t" => array(      //删除一条微博 
   "https://graph.qq.com/t/del_t", 
   array("id", "format" => "json"), 
   "post" 
  ), 
  "get_repost_list" => array(    //获取单条微博的转发或点评列表 
   "https://graph.qq.com/t/get_repost_list", 
   array("flag", "rootid", "pageflag", "pagetime", "reqnum", "twitterid", "format" => "json") 
  ), 
  "get_info" => array(     //获取当前用户资料 
   "https://graph.qq.com/user/get_info", 
   array("format" => "json") 
  ), 
  "get_other_info" => array(    //获取其他用户资料 
   "https://graph.qq.com/user/get_other_info", 
   array("format" => "json", "#name-1", "#fopenid-1") 
  ), 
  "get_fanslist" => array( 
   "https://graph.qq.com/relation/get_fanslist", //我的微博粉丝列表 
   array("format" => "json", "reqnum", "startindex", "#mode", "#install", "#sex") 
  ), 
  "get_idollist" => array( 
   "https://graph.qq.com/relation/get_idollist", //我的微博收听列表 
   array("format" => "json", "reqnum", "startindex", "#mode", "#install") 
  ), 
  "add_idol" => array( 
   "https://graph.qq.com/relation/add_idol",  //微博收听某用户 
   array("format" => "json", "#name-1", "#fopenids-1"), 
   "post" 
  ), 
  "del_idol" => array(   //微博取消收听某用户 
   "https://graph.qq.com/relation/del_idol", 
   array("format" => "json", "#name-1", "#fopenid-1"), 
   "post" 
  ) 
 ); 
 private $keysarr; 
 function __construct(){ 
  if($_session["openid"]){ 
   $this->keysarr = array( 
    "oauth_consumer_key" => appid, 
    "access_token" => $_session['access_token'], 
    "openid" => $_session["openid"] 
   ); 
  }else{ 
   $this->keysarr = array( 
    "oauth_consumer_key" => appid 
   ); 
  } 
 } 
 public function qq_login(){ 
  //-------生成唯一随机串防csrf攻击 
  $_session['state'] = md5(uniqid(rand(), true)); 
  $keysarr = array( 
   "response_type" => "code", 
   "client_id" => appid, 
   "redirect_uri" => callback, 
   "state" => $_session['state'], 
   "scope" => scope 
  ); 
  $login_url = self::get_auth_code_url.'?'.http_build_query($keysarr); 
  header("location:$login_url"); 
 } 
 public function qq_callback(){ 
  //--------验证state防止csrf攻击 
  if($_get['state'] != $_session['state']){ 
   return false; 
  } 
  //-------请求参数列表 
  $keysarr = array( 
   "grant_type" => "authorization_code", 
   "client_id" => appid, 
   "redirect_uri" => callback, 
   "client_secret" => appkey, 
   "code" => $_get['code'] 
  ); 
  //------构造请求access_token的url 
  $token_url = self::get_access_token_url.'?'.http_build_query($keysarr); 
  $response = $this->get_contents($token_url); 
  if(strpos($response, "callback") !== false){ 
   $lpos = strpos($response, "("); 
   $rpos = strrpos($response, ")"); 
   $response = substr($response, $lpos + 1, $rpos - $lpos -1); 
   $msg = json_decode($response); 
   if(isset($msg->error)){ 
    $this->showerror($msg->error, $msg->error_description); 
   } 
  } 
  $params = array(); 
  parse_str($response, $params); 
  $_session["access_token"]=$params["access_token"]; 
  $this->keysarr['access_token']=$params['access_token']; 
  return $params["access_token"]; 
 } 
 
 public function get_contents($url){ 
  if (ini_get("allow_url_fopen") == "1") { 
   $response = file_get_contents($url); 
  }else{ 
   $ch = curl_init(); 
   curl_setopt($ch, curlopt_ssl_verifypeer, false); 
   curl_setopt($ch, curlopt_returntransfer, true); 
   curl_setopt($ch, curlopt_url, $url); 
   $response = curl_exec($ch); 
   curl_close($ch); 
  } 
  if(empty($response)){ 
   return false; 
  } 
  return $response; 
 } 
 public function get_openid(){ 
  //-------请求参数列表 
  $keysarr = array( 
   "access_token" => $_session["access_token"] 
  ); 
  $graph_url = self::get_openid_url.'?'.http_build_query($keysarr); 
  $response = $this->get_contents($graph_url); 
  //--------检测错误是否发生 
  if(strpos($response, "callback") !== false){ 
   $lpos = strpos($response, "("); 
   $rpos = strrpos($response, ")"); 
   $response = substr($response, $lpos + 1, $rpos - $lpos -1); 
  } 
  $user = json_decode($response); 
  if(isset($user->error)){ 
   $this->showerror($user->error, $user->error_description); 
  } 
  //------记录openid 
  $_session['openid']=$user->openid; 
  $this->keysarr['openid']=$user->openid; 
  return $user->openid; 
 } 
 
 /** 
  * showerror 
  * 显示错误信息 
  * @param int $code 错误代码 
  * @param string $description 描述信息（可选） 
  */ 
 public function showerror($code, $description = '$'){ 
   echo "<meta charset=\"utf-8\">"; 
   echo "<h3>error:</h3>$code"; 
   echo "<h3>msg :</h3>$description"; 
   exit(); 
 } 
 
 /** 
  * _call 
  * 魔术方法，做api调用转发 
  * @param string $name 调用的方法名称 
  * @param array $arg  参数列表数组 
  * @since 5.0 
  * @return array   返加调用结果数组 
  */ 
 public function __call($name,$arg){ 
  //如果apimap不存在相应的api 
  if(empty($this->apimap[$name])){ 
   $this->showerror("api调用名称错误","不存在的api: <span style='color:red;'>$name</span>"); 
  } 
  //从apimap获取api相应参数 
  $baseurl = $this->apimap[$name][0]; 
  $argslist = $this->apimap[$name][1]; 
  $method = isset($this->apimap[$name][2]) ? $this->apimap[$name][2] : "get"; 
  if(empty($arg)){ 
   $arg[0] = null; 
  } 
  $responsearr = json_decode($this->_applyapi($arg[0], $argslist, $baseurl, $method),true); 
  //检查返回ret判断api是否成功调用 
  if($responsearr['ret'] == 0){ 
   return $responsearr; 
  }else{ 
   $this->showerror($responsearr['ret'], $responsearr['msg']); 
  } 
 } 
 
 //调用相应api 
 private function _applyapi($arr, $argslist, $baseurl, $method){ 
  $pre = "#"; 
  $keysarr = $this->keysarr; 
  $optionarglist = array();//一些多项选填参数必选一的情形 
  foreach($argslist as $key => $val){ 
   $tmpkey = $key; 
   $tmpval = $val; 
   if(!is_string($key)){ 
    $tmpkey = $val; 
    if(strpos($val,$pre) === 0){ 
     $tmpval = $pre; 
     $tmpkey = substr($tmpkey,1); 
     if(preg_match("/-(\d$)/", $tmpkey, $res)){ 
      $tmpkey = str_replace($res[0], "", $tmpkey); 
      $optionarglist[]= $tmpkey; 
     } 
    }else{ 
     $tmpval = null; 
    } 
   } 
   //-----如果没有设置相应的参数 
   if(!isset($arr[$tmpkey]) || $arr[$tmpkey] === ""){ 
    if($tmpval == $pre){ 
     continue; 
    }else if($tmpval){//则使用默认的值 
     $arr[$tmpkey] = $tmpval; 
    }else{ 
     $this->showerror("api调用参数错误","未传入参数$tmpkey"); 
    } 
   } 
   $keysarr[$tmpkey] = $arr[$tmpkey]; 
  } 
  //检查选填参数必填一的情形 
  if(count($optionarglist)!=0){ 
   $n = 0; 
   foreach($optionarglist as $val){ 
    if(in_array($val, array_keys($keysarr))){ 
     $n++; 
    } 
   } 
   if(!$n){ 
    $str = implode(",",$optionarglist); 
    $this->showerror("api调用参数错误",$str."必填一个"); 
   } 
  } 
  if($method == "post"){ 
   $response = $this->post($baseurl, $keysarr, 0); 
  }else if($method == "get"){ 
   $baseurl=$baseurl.'?'.http_build_query($keysarr); 
   $response = $this->get_contents($baseurl); 
  } 
  return $response; 
 } 
 
 public function post($url, $keysarr, $flag = 0){ 
  $ch = curl_init(); 
  if(! $flag) curl_setopt($ch, curlopt_ssl_verifypeer, false); 
  curl_setopt($ch, curlopt_returntransfer, true); 
  curl_setopt($ch, curlopt_post, true); 
  curl_setopt($ch, curlopt_postfields, $keysarr); 
  curl_setopt($ch, curlopt_url, $url); 
  $ret = curl_exec($ch); 
  curl_close($ch); 
  return $ret; 
 } 
}