kellan/consumer-front
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 60 Wiki Activity

前端传入state
Uni-app H5 Deploy (Prod + Staging) / deploy (release) Successful in 48s
Details

Browse Source
This commit is contained in:
kk
2026-07-17 14:40:21 +08:00
parent 9439bcf9d7
commit b336b901d3
2 changed files with 35 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pages/auth/loading.vue
+23 -33
View File
@@ -118,28 +118,24 @@ export default {
// 静默授权：微信用 snsapi_base，支付宝用 auth_base
const scopes = platform === 'alipay' ? 'auth_base' : 'snsapi_base';
// 构建 state（包含 device_id，回调时原样回传）
const stateObj = {};
if (this.deviceId) {
stateObj.device_id = this.deviceId;
}
const res = await gatewayGet('/api/v1/user/auth/url', {
app_no: appNo,
scopes: scopes,
redirect_uri: redirectUri,
state: Object.keys(stateObj).length > 0 ? JSON.stringify(stateObj) : '',
});
const data = res.data || {};
if (data.code === 0 && data.data && data.data.auth_url) {
// 通过 state 传递 device_id（OAuth 标准保证 state 原样回传）
let authUrl = data.data.auth_url;
if (this.deviceId) {
const stateVal = encodeURIComponent(JSON.stringify({ device_id: this.deviceId }));
try {
const urlObj = new URL(authUrl);
urlObj.searchParams.set('state', stateVal);
authUrl = urlObj.toString();
} catch (_) {
authUrl += (authUrl.includes('?') ? '&' : '?') + 'state=' + stateVal;
}
}
// 跳转微信授权页（静默，不弹窗）
window.location.href = authUrl;
// 后端已将 state 写入授权 URL，直接跳转
window.location.href = data.data.auth_url;
} else {
uni.showToast({ title: data.message || '获取授权失败', icon: 'none' });
setTimeout(() => this.goToScan(), 1500);
@@ -279,30 +275,24 @@ export default {
// 用户信息授权：微信用 snsapi_userinfo，支付宝用 auth_user
const scopes = platform === 'alipay' ? 'auth_user' : 'snsapi_userinfo';
const res = await gatewayGet('/api/v1/user/auth/url', {
app_no: appNo,
scopes: scopes,
redirect_uri: redirectUri,
});
const data = res.data || {};
if (data.code === 0 && data.data && data.data.auth_url) {
// 通过 state 传递 action 和 device_id（OAuth 标准保证 state 原样回传）
// 构建 state（包含 action 和 device_id，回调时原样回传）
const stateObj = { action: 'userinfo' };
if (this.deviceId) {
stateObj.device_id = this.deviceId;
}
const stateVal = encodeURIComponent(JSON.stringify(stateObj));
let authUrl = data.data.auth_url;
try {
const urlObj = new URL(authUrl);
urlObj.searchParams.set('state', stateVal);
authUrl = urlObj.toString();
} catch (_) {
authUrl += (authUrl.includes('?') ? '&' : '?') + 'state=' + stateVal;
}
// 跳转微信授权页（弹窗确认）
window.location.href = authUrl;
const res = await gatewayGet('/api/v1/user/auth/url', {
app_no: appNo,
scopes: scopes,
redirect_uri: redirectUri,
state: JSON.stringify(stateObj),
});
const data = res.data || {};
if (data.code === 0 && data.data && data.data.auth_url) {
// 后端已将 state 写入授权 URL，直接跳转
window.location.href = data.data.auth_url;
} else {
uni.showToast({ title: data.message || '获取授权失败', icon: 'none' });
setTimeout(() => this.goToHomeWithAction(), 1500);
src/pages/index/index.vue
+18 -24
View File
@@ -344,34 +344,28 @@ export default {
window.location.origin.replace(/^http:/, 'https:') + window.location.pathname
);
// 获取非静默授权链接（会弹窗确认）
const res = await gatewayGet('/api/v1/user/auth/url', {
app_no: appNo,
scopes: 'snsapi_userinfo',
redirect_uri: redirectUri,
});
const data = res.data || {};
if (data.code === 0 && data.data && data.data.auth_url) {
// 通过 state 传递 action 和 device_id（OAuth 标准保证 state 原样回传）
// 构建 state（包含 action 和 device_id，回调时原样回传）
const stateObj = { action: 'userinfo' };
if (this.deviceId) {
stateObj.device_id = this.deviceId;
}
const stateVal = encodeURIComponent(JSON.stringify(stateObj));
// 解析 auth_url，安全地设置 state 参数（避免重复）
let authUrl = data.data.auth_url;
try {
const urlObj = new URL(authUrl);
urlObj.searchParams.set('state', stateVal);
authUrl = urlObj.toString();
} catch (_) {
// URL 解析失败时直接拼接
authUrl += (authUrl.includes('?') ? '&' : '?') + 'state=' + stateVal;
}
console.log('[index] 跳转授权页:', authUrl);
// 跳转微信授权页（弹窗确认）
window.location.href = authUrl;
// 用户信息授权：微信用 snsapi_userinfo，支付宝用 auth_user
const platform = uni.getStorageSync('platform') || 'wechat';
const scopes = platform === 'alipay' ? 'auth_user' : 'snsapi_userinfo';
const res = await gatewayGet('/api/v1/user/auth/url', {
app_no: appNo,
scopes: scopes,
redirect_uri: redirectUri,
state: JSON.stringify(stateObj),
});
const data = res.data || {};
if (data.code === 0 && data.data && data.data.auth_url) {
console.log('[index] 跳转授权页:', data.data.auth_url);
// 后端已将 state 写入授权 URL，直接跳转
window.location.href = data.data.auth_url;
} else {
console.warn('[index] 获取授权链接失败:', data.message);
}