建立掃碼登入

在本部分，你將在開發者後臺建立掃碼登入，並完成基礎配置。

1. 登入釘釘開發者後臺。

2. 在應用詳情頁，單擊釘釘登入與分享，然後輸入回撥域名，再點選新增。

   說明

   如果你還沒有域名，可以先使用配置內網穿透時設定的服務端域名，請求地址設定為/login。

搭建後端服務

在本部分，你將使用spring.io快速搭建服務端專案。

1. 使用瀏覽器訪問https://start.spring.io/。

2. 根據以下操作下載服務端程式碼。

   1. 配置專案資訊。

      • Project：選擇Maven專案。

      • Language：選擇Java。

      • Packaging：選擇Jar包

      • Java：本教程選擇Java8，你可以根據自身需要選擇相應的Java版本。

   2. 單擊GENERATE

      生成專案檔案及下載。

3. 解壓下載的專案檔案，然後使用IntelliJ IDEA開啟。

4. 參考以下步驟，下載並匯入釘釘Java SDK。

   1. 單擊這裡下載釘釘服務端Java SDK。

   2. 解壓dingtalk-sdk-java.zip。

   3. 在IntelliJ IDEA工具的頂部選單欄中，選擇File > Project Structure。

   4. 選擇Libraries，然後單擊 + 號，在彈出的介面單擊Java。

   5. 選中下載的SDK，然後依次單擊OK > Apply完成匯入。

5. 開啟pom.xml檔案，新增如下依賴。

   <dependency>
   <groupId>org.springframework.boot</groupId>
   <artifactId>spring-boot-starter-web</artifactId>
   </dependency>
   <dependency>
   <groupId>com.alibaba</groupId>
   <artifactId>fastjson</artifactId>
   <version>1.2.6</version>
   </dependency>
   一鍵複製
   

6. 等待專案載入完成後，在src/main/java/com/example/demo/目錄下新建一個類LoginController.java。

7. 然後在LoginController.java中新增以下程式碼。

   • 修改getToken()方法中AppKey和AppSecret為步驟一H5微應用的AppKey和AppSecret。

   • 修改appid和appSecret為步驟三建立掃碼登入時建立的appid和appSecret。

   import com.alibaba.fastjson.JSONObject;
   import com.dingtalk.api.DefaultDingTalkClient;
   import com.dingtalk.api.DingTalkClient;
   import com.dingtalk.api.request.OapiGettokenRequest;
   import com.dingtalk.api.request.OapiSnsGetuserinfoBycodeRequest;
   import com.dingtalk.api.request.OapiUserGetbyunionidRequest;
   import com.dingtalk.api.request.OapiV2UserGetRequest;
   import com.dingtalk.api.response.OapiGettokenResponse;
   import com.dingtalk.api.response.OapiSnsGetuserinfoBycodeResponse;
   import com.dingtalk.api.response.OapiUserGetbyunionidResponse;
   import com.dingtalk.api.response.OapiV2UserGetResponse;
   import com.taobao.api.ApiException;
   import org.springframework.web.bind.annotation.*;
   @RestController
   public class LoginController {
   @RequestMapping(value = <span class="hljs-string">"/login"</span>)
   <span class="hljs-keyword">public</span> <span class="hljs-keyword">String</span> login(@RequestBody(required = <span class="hljs-literal">false</span>) JSONObject json, @RequestParam(<span class="hljs-string">"code"</span>) <span class="hljs-keyword">String</span> code) {
       <span class="hljs-keyword">try</span> {
           <span class="hljs-comment">// 獲取access_token，注意正式程式碼要有異常流處理</span>
           <span class="hljs-keyword">String</span> access_token = getToken();
   
           <span class="hljs-comment">// 通過臨時授權碼獲取授權使用者的個人資訊</span>
           DefaultDingTalkClient client2 = <span class="hljs-keyword">new</span> <span class="hljs-type">DefaultDingTalkClient</span>(<span class="hljs-string">"https://oapi.dingtalk.com/sns/getuserinfo_bycode"</span>);
           OapiSnsGetuserinfoBycodeRequest reqBycodeRequest = <span class="hljs-keyword">new</span> <span class="hljs-type">OapiSnsGetuserinfoBycodeRequest</span>();
           <span class="hljs-comment">// 通過掃描二維碼，跳轉指定的redirect_uri後，向url中追加的code臨時授權碼</span>
           reqBycodeRequest.setTmpAuthCode(code);
           <span class="hljs-comment">// 修改appid和appSecret為步驟三建立掃碼登入時建立的appid和appSecret</span>
           OapiSnsGetuserinfoBycodeResponse bycodeResponse = client2.execute(reqBycodeRequest, <span class="hljs-string">"appId"</span>, <span class="hljs-string">"appSecret"</span>);
   
           <span class="hljs-comment">// 根據unionid獲取userid</span>
           <span class="hljs-keyword">String</span> unionid = bycodeResponse.getUserInfo().getUnionid();
           DingTalkClient clientDingTalkClient = <span class="hljs-keyword">new</span> <span class="hljs-type">DefaultDingTalkClient</span>(<span class="hljs-string">"https://oapi.dingtalk.com/topapi/user/getbyunionid"</span>);
           OapiUserGetbyunionidRequest reqGetbyunionidRequest = <span class="hljs-keyword">new</span> <span class="hljs-type">OapiUserGetbyunionidRequest</span>();
           reqGetbyunionidRequest.setUnionid(unionid);
           OapiUserGetbyunionidResponse oapiUserGetbyunionidResponse = clientDingTalkClient.execute(reqGetbyunionidRequest, access_token);
           <span class="hljs-keyword">if</span> (oapiUserGetbyunionidResponse.getErrcode() == <span class="hljs-number">60121</span>L) {
               <span class="hljs-keyword">return</span> bycodeResponse.getBody();
           }
           <span class="hljs-comment">// 根據userId獲取使用者資訊</span>
           <span class="hljs-keyword">String</span> userid = oapiUserGetbyunionidResponse.getResult().getUserid();
           DingTalkClient clientDingTalkClient2 = <span class="hljs-keyword">new</span> <span class="hljs-type">DefaultDingTalkClient</span>(
                   <span class="hljs-string">"https://oapi.dingtalk.com/topapi/v2/user/get"</span>);
           OapiV2UserGetRequest reqGetRequest = <span class="hljs-keyword">new</span> <span class="hljs-type">OapiV2UserGetRequest</span>();
           reqGetRequest.setUserid(userid);
           reqGetRequest.setLanguage(<span class="hljs-string">"zh_CN"</span>);
           OapiV2UserGetResponse rspGetResponse = clientDingTalkClient2.execute(reqGetRequest, access_token);
           System.out.println(rspGetResponse.getBody());
           <span class="hljs-keyword">return</span> rspGetResponse.getBody();
       } <span class="hljs-keyword">catch</span> (ApiException e) {
           e.printStackTrace();
           <span class="hljs-keyword">return</span> <span class="hljs-string">"-1"</span>;
       }
   }
   
   <span class="hljs-keyword">public</span> <span class="hljs-keyword">String</span> getToken() {
       <span class="hljs-keyword">try</span> {
           DefaultDingTalkClient client = <span class="hljs-keyword">new</span> <span class="hljs-type">DefaultDingTalkClient</span>(<span class="hljs-string">"https://oapi.dingtalk.com/gettoken"</span>);
           OapiGettokenRequest request = <span class="hljs-keyword">new</span> <span class="hljs-type">OapiGettokenRequest</span>();
           <span class="hljs-comment">// 填寫步驟一建立應用的Appkey</span>
           request.setAppkey(<span class="hljs-string">"AppKey"</span>);
           <span class="hljs-comment">// 填寫步驟一建立應用的Appsecret</span>
           request.setAppsecret(<span class="hljs-string">"AppSecret"</span>);
           request.setHttpMethod(<span class="hljs-string">"GET"</span>);
           OapiGettokenResponse response = client.execute(request);
           <span class="hljs-keyword">String</span> accessToken = response.getAccessToken();
           <span class="hljs-keyword">return</span> accessToken;
       } <span class="hljs-keyword">catch</span> (ApiException e) {
           <span class="hljs-keyword">throw</span> <span class="hljs-keyword">new</span> <span class="hljs-type">RuntimeException</span>();
       }
   }
   
   }<div class="code-copy" data-clipboard-text="import com.alibaba.fastjson.JSONObject;
   
   import com.dingtalk.api.DefaultDingTalkClient;
   
   import com.dingtalk.api.DingTalkClient;
   
   import com.dingtalk.api.request.OapiGettokenRequest;
   
   import com.dingtalk.api.request.OapiSnsGetuserinfoBycodeRequest;
   
   import com.dingtalk.api.request.OapiUserGetbyunionidRequest;
   
   import com.dingtalk.api.request.OapiV2UserGetRequest;
   
   import com.dingtalk.api.response.OapiGettokenResponse;
   
   import com.dingtalk.api.response.OapiSnsGetuserinfoBycodeResponse;
   
   import com.dingtalk.api.response.OapiUserGetbyunionidResponse;
   
   import com.dingtalk.api.response.OapiV2UserGetResponse;
   
   import com.taobao.api.ApiException;
   
   import org.springframework.web.bind.annotation.*;
   @RestController
   
   public class LoginController {
   @RequestMapping(value = &quot;/login&quot;)
   public String login(@RequestBody(required = false) JSONObject json, @RequestParam(&quot;code&quot;) String code) {
       try {
           // 獲取access_token，注意正式程式碼要有異常流處理
           String access_token = getToken();
   
           // 通過臨時授權碼獲取授權使用者的個人資訊
           DefaultDingTalkClient client2 = new DefaultDingTalkClient(&quot;https://oapi.dingtalk.com/sns/getuserinfo_bycode&quot;);
           OapiSnsGetuserinfoBycodeRequest reqBycodeRequest = new OapiSnsGetuserinfoBycodeRequest();
           // 通過掃描二維碼，跳轉指定的redirect_uri後，向url中追加的code臨時授權碼
           reqBycodeRequest.setTmpAuthCode(code);
           // 修改appid和appSecret為步驟三建立掃碼登入時建立的appid和appSecret
           OapiSnsGetuserinfoBycodeResponse bycodeResponse = client2.execute(reqBycodeRequest, &quot;appId&quot;, &quot;appSecret&quot;);
   
           // 根據unionid獲取userid
           String unionid = bycodeResponse.getUserInfo().getUnionid();
           DingTalkClient clientDingTalkClient = new DefaultDingTalkClient(&quot;https://oapi.dingtalk.com/topapi/user/getbyunionid&quot;);
           OapiUserGetbyunionidRequest reqGetbyunionidRequest = new OapiUserGetbyunionidRequest();
           reqGetbyunionidRequest.setUnionid(unionid);
           OapiUserGetbyunionidResponse oapiUserGetbyunionidResponse = clientDingTalkClient.execute(reqGetbyunionidRequest, access_token);
           if (oapiUserGetbyunionidResponse.getErrcode() == 60121L) {
               return bycodeResponse.getBody();
           }
           // 根據userId獲取使用者資訊
           String userid = oapiUserGetbyunionidResponse.getResult().getUserid();
           DingTalkClient clientDingTalkClient2 = new DefaultDingTalkClient(
                   &quot;https://oapi.dingtalk.com/topapi/v2/user/get&quot;);
           OapiV2UserGetRequest reqGetRequest = new OapiV2UserGetRequest();
           reqGetRequest.setUserid(userid);
           reqGetRequest.setLanguage(&quot;zh_CN&quot;);
           OapiV2UserGetResponse rspGetResponse = clientDingTalkClient2.execute(reqGetRequest, access_token);
           System.out.println(rspGetResponse.getBody());
           return rspGetResponse.getBody();
       } catch (ApiException e) {
           e.printStackTrace();
           return &quot;-1&quot;;
       }
   }
   
   public String getToken() {
       try {
           DefaultDingTalkClient client = new DefaultDingTalkClient(&quot;https://oapi.dingtalk.com/gettoken&quot;);
           OapiGettokenRequest request = new OapiGettokenRequest();
           // 填寫步驟一建立應用的Appkey
           request.setAppkey(&quot;AppKey&quot;);
           // 填寫步驟一建立應用的Appsecret
           request.setAppsecret(&quot;AppSecret&quot;);
           request.setHttpMethod(&quot;GET&quot;);
           OapiGettokenResponse response = client.execute(request);
           String accessToken = response.getAccessToken();
           return accessToken;
       } catch (ApiException e) {
           throw new RuntimeException();
       }
   }
   
   }">
   一鍵複製

構造掃碼登入請求

1. 執行DemoApplication.java，啟動後端服務。

2. 開啟瀏覽器，訪問以下地址。

   替換引數appid和redirect_uri為建立掃碼登入時登入應用的appId和回撥域名。

   https://oapi.dingtalk.com/connect/qrconnect?appid=APPID&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=REDIRECT_URI
   一鍵複製
   

   引數	是否必填	說明
   appid	是	建立的登入應用的appid。
   response_type	是	固定值為code。
   scope	是	取值為snsapi_login用於釘釘容器外獲取使用者授權。
   state	是	用於防止重放攻擊，開發者可以根據此資訊來判斷redirect_uri只能執行一次來避免重放攻擊。
   redirect_uri	是	建立掃碼登入應用授權時填寫的回撥域名。

3. 瀏覽器顯示如下圖。

   說明

   如果你需要將釘釘登入二維碼內嵌到自己頁面中，可以參考掃碼登入第三方網站步驟二中的方式二將釘釘登入二維碼內嵌到自己頁面中。

4. 使用手機釘釘掃描瀏覽器中的二維碼，掃描結果如下圖所示。

5. 單擊登入網頁版三方登陸測試後，瀏覽器返回資訊如下。

   • 掃碼成員在本企業內。

   • 掃碼成員不在企業內，返回的資料格式如下。

     {
     "errcode": 0,
     "errmsg": "ok",
     "user_info": {
     "nick": "楊XX",
     "unionid": "E2Mmii4axxx",
     "dingId": "\(:LWCP_v1:\)gtEp97Mxxxgg==",
     "openid": "AzF8w80nfpiSFxxxxx",
     "main_org_auth_high_level": true
     
     }
     
     }
     一鍵複製
     

恭喜

你已完成本教程的全部內容！

你可以通過修改訪問連結的方式實現釘釘內免登第三方網站和使用釘釘賬號登入第三方網站。

例如：

• 釘釘內免登第三方網站

  https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=APPID&response_type=code&scope=snsapi_auth&state=STATE&redirect_uri=REDIRECT_URI
  一鍵複製
  

• 使用釘釘賬號登入第三方網站

  https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=APPID&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=REDIRECT_URI
  一鍵複製