【PHP】基於ThinkPHP框架搭建OAuth2.0服務
阿新 • • 發佈:2019-01-25
這幾天一直在搞OAuth2.0的東西,寫SDK啥的,為了更加深入的瞭解服務端的OAuth驗證機制,就自己動手搭了個php下OAuth的環境,並且將它移植到了自己比較熟的tp框架裡。
廢話不少說,開動。
其實網上是有OAuth2.0的php版本的。
好,這裡我們可以把下載下來的包解壓,把Lib下的OAuth.inc改名為OAuth2.class.php後放到tp核心包下的目錄下:
Tree程式碼- /Extend/Library/ORG/OAuth/OAuth2.class.php
接下來我們要繼承這個類;
在這個目錄下新建一個ThinkOAuth2.class.php檔案:
- <?php
- /**
- * @category ORG
- * @package ORG
- * @author Leyteris
- * @version 2012.3.16
- */
- // OAUTH2_DB_DSN 資料庫連線DSN
- // OAUTH2_CODES_TABLE 伺服器表名稱
- // OAUTH2_CLIENTS_TABLE 客戶端表名稱
- // OAUTH2_TOKEN_TABLE 驗證碼錶名稱
- import("ORG.OAuth.OAuth2");
- class ThinkOAuth2 extends OAuth2 {
-
private
- private $table;
- /**
- * 構造
- */
- public function __construct() {
- parent::__construct();
- $this -> db = Db::getInstance(C('OAUTH2_DB_DSN'));
- $this -> table = array(
- 'auth_codes'=>C('OAUTH2_CODES_TABLE'),
-
'clients'
- 'tokens'=>C('OAUTH2_TOKEN_TABLE')
- );
- }
- /**
- * 析構
- */
- function __destruct() {
- $this->db = NULL; // Release db connection
- }
- private function handleException($e) {
- echo "Database error: " . $e->getMessage();
- exit;
- }
- /**
- *
- * 增加client
- * @param string $client_id
- * @param string $client_secret
- * @param string $redirect_uri
- */
- public function addClient($client_id, $client_secret, $redirect_uri) {
- $time = time();
- $sql = "INSERT INTO {$this -> table['clients']} ".
- "(client_id, client_secret, redirect_uri, create_time) VALUES (\"{$client_id}\", \"{$client_secret}\", \"{$redirect_uri}\",\"{$time}\")";
- $this -> db -> execute($sql);
- }
- /**
- * Implements OAuth2::checkClientCredentials()
- * @see OAuth2::checkClientCredentials()
- */
- protected function checkClientCredentials($client_id, $client_secret = NULL) {
- $sql = "SELECT client_secret FROM {$this -> table['clients']} ".
- "WHERE client_id = \"{$client_id}\"";
- $result = $this -> db -> query($sql);
- if ($client_secret === NULL) {
- return $result !== FALSE;
- }
- //Log::write("checkClientCredentials : ".$result);
- //Log::write("checkClientCredentials : ".$result[0]);
- //Log::write("checkClientCredentials : ".$result[0]["client_secret"]);
- return $result[0]["client_secret"] == $client_secret;
- }
- /**
- * Implements OAuth2::getRedirectUri().
- * @see OAuth2::getRedirectUri()
- */
- protected function getRedirectUri($client_id) {
- $sql = "SELECT redirect_uri FROM {$this -> table['clients']} ".
- "WHERE client_id = \"{$client_id}\"";
- $result = $this -> db -> query($sql);
- if ($result === FALSE) {
- return FALSE;
- }
- //Log::write("getRedirectUri : ".$result);
- //Log::write("getRedirectUri : ".$result[0]);
- //Log::write("getRedirectUri : ".$result[0]["redirect_uri"]);
- return isset($result[0]["redirect_uri"]) && $result[0]["redirect_uri"] ? $result[0]["redirect_uri"] : NULL;
- }
- /**
- * Implements OAuth2::getAccessToken().
- * @see OAuth2::getAccessToken()
- */
- protected function getAccessToken($access_token) {
- $sql = "SELECT client_id, expires, scope FROM {$this -> table['tokens']} ".
- "WHERE access_token = \"{$access_token}\"";
- $result = $this -> db -> query($sql);
- //Log::write("getAccessToken : ".$result);
- //Log::write("getAccessToken : ".$result[0]);
- return $result !== FALSE ? $result : NULL;
- }
- /**
- * Implements OAuth2::setAccessToken().
- * @see OAuth2::setAccessToken()
- */
- protected function setAccessToken($access_token, $client_id, $expires, $scope = NULL) {
- $sql = "INSERT INTO {$this -> table['tokens']} ".
- "(access_token, client_id, expires, scope) ".
- "VALUES (\"{$access_token}\", \"{$client_id}\", \"{$expires}\", \"{$scope}\")";
- $this -> db -> execute($sql);
- }
- /**
- * Overrides OAuth2::getSupportedGrantTypes().
- * @see OAuth2::getSupportedGrantTypes()
- */
- protected function getSupportedGrantTypes() {
- return array(
- OAUTH2_GRANT_TYPE_AUTH_CODE
- );
- }
- /**
- * Overrides OAuth2::getAuthCode().
- * @see OAuth2::getAuthCode()
- */
- protected function getAuthCode($code) {
- $sql = "SELECT code, client_id, redirect_uri, expires, scope ".
- "FROM {$this -> table['auth_codes']} WHERE code = \"{$code}\"";
- $result = $this -> db -> query($sql);
- //Log::write("getAuthcode : ".$result);
- //Log::write("getAuthcode : ".$result[0]);
- //Log::write("getAuthcode : ".$result[0]["code"]);
- return $result !== FALSE ? $result[0] : NULL;
- }
- /**
- * Overrides OAuth2::setAuthCode().
- * @see OAuth2::setAuthCode()
- */
- protected function setAuthCode($code, $client_id, $redirect_uri, $expires, $scope = NULL) {
- $time = time();
- $sql = "INSERT INTO {$this -> table['auth_codes']} ".
- "(code, client_id, redirect_uri, expires, scope) ".
- "VALUES (\"${code}\", \"${client_id}\", \"${redirect_uri}\", \"${expires}\", \"${scope}\")";
- $result = $this -> db -> execute($sql);
- }
- /**
- * Overrides OAuth2::checkUserCredentials().
- * @see OAuth2::checkUserCredentials()
- */
- protected function checkUserCredentials($client_id, $username, $password){
- return TRUE;
- }
- }
在這裡我們需要建立資料庫:
Sql程式碼- CREATE TABLE `oauth_client` (
- `id` bigint(20) NOT NULL auto_increment,
- `client_id` varchar(32) NOT NULL,
- `client_secret` varchar(32) NOT NULL,
- `redirect_uri` varchar(200) NOT NULL,
- `create_time` int(20) default NULL,
- PRIMARY KEY (`id`)
- ) ENGINE=MyISAM AUTO_INCREMENT=3 DEFAULT CHARSET=utf8;
- CREATE TABLE `oauth_code` (
- `id` bigint(20) NOT NULL auto_increment,
- `client_id` varchar(32) NOT NULL,
- `user_id` varchar(32) NOT NULL,
- `code` varchar(40) NOT NULL,
- `redirect_uri` varchar(200) NOT NULL,
- `expires` int(11) NOT NULL,
- `scope` varchar(250) default NULL,
- PRIMARY KEY (`id`)
- ) ENGINE=MyISAM DEFAULT CHARSET=utf8;
- CREATE TABLE `oauth_token` (
- `id` bigint(20) NOT NULL auto_increment,
- `client_id` varchar(32) NOT NULL,
- `user_id` varchar(32) NOT NULL,
- `access_token` varchar(40) NOT NULL,
- `refresh_token` varchar(40) NOT NULL,
- `expires` int(11) NOT NULL,
- `scope` varchar(200) default NULL,
- PRIMARY KEY (`id`)
- ) ENGINE=MyISAM AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
上面的資料庫表名可以自己隨便定;但是要在config.php配置表名:
Php程式碼- 'OAUTH2_CODES_TABLE'=>'oauth_code',
- 'OAUTH2_CLIENTS_TABLE'=>'oauth_client',
- 'OAUTH2_TOKEN_TABLE'=>'oauth_token',
如果OAuth的伺服器不是當前伺服器,那就要指定下DSN地址了:
Php程式碼- 'OAUTH2_DB_DSN'=>'mysql://root:[email protected]:3306/database'
好了,大致的核心庫程式碼就