Nailing development document

1. Type of use

The application type	Support capability	Whether it supports the application from shelf to nail
Enterprise internal application	Applet （ Support mobile end ） H5 Microapplication （ Support mobile terminal and PC End ） robot	no
Third party enterprise applications	Applet （ Support mobile end ） H5 Microapplication （ Support mobile terminal and PC End ）	yes
Third party personal applications	Applet （ Support mobile end ）	no

2.   Access credentials

•   Get the internal application of the enterprise access_token 
  GET https://oapi.dingtalk.com/gettoken?appkey=appkey&appsecret=appsecret
• The service provider obtains the license of the third-party application enterprise access_token 
• obtain jsapi_ticket
• Get the background login free of the micro application access_token
  GET https://oapi.dingtalk.com/sso/gettoken?corpid=ding1234&corpsecret=12345

3. Get the user's personal identity certificate

• Get the login user's access credentials
  Create an -> Nailing login and sharing -> Add a callback URL -> OAuth Login authorization -> Construct login authorization page
  
   https://login.dingtalk.com/oauth2/auth?
  redirect_uri=https%3A%2F%2Fwww.aaaaa.com%2Fa%2Fb  The callback address must be urlencode
  &response_type=code     The fixed value is code
  &client_id=dingbbbbbbb  AppKey
  &scope=openid                After authorization, you can obtain users userid
  &state=dddd                     Follow authCode Return as is
  &prompt=consent             The value is consent when , You will enter the authorization confirmation page
• Get users token

  POST /v1.0/oauth2/userAccessToken HTTP/1.1
  Host:api.dingtalk.com
  Content-Type:application/json

  {
    "clientId" : "String",             AppKey
    "clientSecret" : "String",     AppSecret
    "code" : "String",                  Temporary authorization code
    "grantType" : "String"          authorization_code
  }

4. Apply identity related access credentials

• Get applied API Access credentials
  GET https://oapi.dingtalk.com/gettoken?appkey=appkey&appsecret=appsecret
• Get workbench API Access credentials
  Developer background homepage , Generate TOKEN
• Get the internal application of the enterprise accessToken

  POST /v1.0/oauth2/accessToken HTTP/1.1
  Host:api.dingtalk.com
  Content-Type:application/json

  {
    "appKey" : "String",
    "appSecret" : "String"
  }

• Obtain the third-party application license of the enterprise accessToken

• establish jsapi ticket

• Get the background login free of the micro application access_token

  POST /v1.0/oauth2/ssoAccessToken HTTP/1.1
  Content-Type:application/json

  {
    "corpid" : "String",         Enterprise corpId
    "ssoSecret" : "String"   sso secret key
  }

5. Authentication （ No registration ）

Login free scenarios supported by authentication

• Enterprise internal application is free of registration
  Obtain the registration free authorization code ->  obtain access_token（oapi.dingtalk.com/gettoken）->  Get users userid -> Get user details

• Application management background login free
  Obtain the registration free authorization code ->  call sso/gettoken Interface to get the application background login free access_token ->  Call the interface to get the identity information of the application administrator

• Log in to a third-party website
  Create and configure applications -> Add interface call permission -> Configure intranet penetration ​​​​​​​-> Set the callback domain name of the third-party website ​​​​​​​-> Build back-end services ​​​​​​​-> Construct the access address of the logged in third-party website -> Visit the third-party website address

  • Browser implementation

    • Sweep the login code

    • Use pin pin account password to log in

  • No need to visit third-party websites in nailing client

6. Address book management

• User management

  • Create user

  • Update user information

  • Delete user

  • Query user details （userid）

  • Get the basic information of department users （dept_id）

  • Get department users userid list

  • Get department user details

  • Get the number of employees

  • Get the list of employees who are not logged in to nailing

  • Query the user according to the mobile phone number

  • according to unionid Get users userid

  • Get the list of Administrators

  • Get the administrator's communication permission range

  • Only the list is recorded in the query

  • Set executive mode

  • Get user executive mode settings

  • Delete user attribute visibility settings

  • Get user attribute visibility settings

  • Get user attribute visibility settings

  • Set user attribute visibility

• Exclusive account
• Department of management
• Role management
• External contacts
• The enterprise management
• Address book visibility management
• Industry address book
• Get the personal information of the user's address book
• Address book events