Silent authorization login and registration of wechat applet

Automatic loading ：

  onLoad: function (options) {

    wx.login({

      success (res) {

        // console.log(res.code)

        if (res.code) {

          // Initiate network request

          wx.request({

            url: 'http://www.day.com/index.php/wxLogin',

            method:'GET',

            data: {

              // nickName:nickName,

              code: res.code

            },

            success(res){

              console.log(res)

            // //  cache openid

            wx.setStorage({

              key:"openid",

              data:res.data.openid

            })  

            //  cache token

            wx.setStorageSync('token', res.data.token)

            }

          })

        } else {

          console.log(' Login failed ！' + res.errMsg)

        }

      }

    })

  },

backstage ：

 // Wechat Authorization 
    public function wxLogin(Request $request)
    {
//         obtain code
        $code = $request->get('code');
//         Get a nickname 
        $nickName ="aa";
//         obtain appId
        $appId = "wxa2469ff6402360ff";
//         obtain appSecret
        $appSecret = "47732169fb165797f0303f1f781de142";
        $url = "https://api.weixin.qq.com/sns/jscode2session?appid={$appId}&secret={$appSecret}&js_code={$code}&grant_type=authorization_code";
        $headerArray = array("Content-type:application/json;", "Accept:application/json");
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, $url);
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_HTTPHEADER, $headerArray);
        $output = curl_exec($ch);
        curl_close($ch);
        $output = json_decode($output, true);
        $session_key = $output['session_key'];
        $openid = $output['openid'];
//         Query exists openid
        $postdata = \app\model\Index::selectData($openid);
        $data = [
            'nickname' => $nickName,
            "openid" => $openid,
            "session_key" => $session_key
        ];
        if (!$postdata) {
            \app\model\Index::addData($data);
        } else {
            \app\model\Index::changeData($openid, $data);
        }
        $key = "example_key";
//        $payload = array(
//            'id' => $postdata->id
//        );
//        $token = JWT::encode($payload, $key, 'HS256');
        $id=$postdata->id;
//        dd($id);
//         Issued by token
        $token=\app\jwt\Jwt::createJwt($id);
        return json([
            'openid' => $data['openid'],
            'token' => $token,
            'id'=>$id
        ]);
    }

//     Query data 
    public static function selectData($openid)
    {
        return self::where('openid', $openid)->find();
    }

//     Add data 
    public static function addData($data)
    {
        return self::create($data);
    }

    //     Modifying data 
    public static function changeData($openid, $data)
    {
        return self::where("openid", $openid)->save($data);
    }

download jwt： composer require firebase/php-jwt

jwt file ：

<?php


namespace app\jwt;


use Firebase\JWT\Key;
use think\Exception;

class Jwt
{
    // Generate token
    public static function createJwt($userId = 'zq')
    {
        $key = md5('[email protected]!'); //jwt Issuing key for , verification token It needs to be used 
        $time = time(); // The issuance of time 
        $expire = $time + 14400; // Expiration time 
        $token = array(
            "user_id" => $userId,
            "iss" => "http://www.najingquan.com/",// Issuing organization 
            "aud" => "zhangqi", // Issued by 
            "iat" => $time,
            "nbf" => $time,
            "exp" => $expire
        );
        $jwt = \Firebase\JWT\JWT::encode($token, $key,'HS256');
        return $jwt;
    }
    // check jwt jurisdiction API
    public static function verifyJwt($jwt = '')
    {
        $key = md5('[email protected]!');
        try {
            $jwtAuth = json_encode(\Firebase\JWT\JWT::decode($jwt, new Key($key,'HS256')));
            $authInfo = json_decode($jwtAuth, true);

            $msg = [];
            if (!empty($authInfo['user_id'])) {
                $msg = [
                    'status' => 1001,
                    'msg' => 'Token Verification passed '
                ];
                return $authInfo['user_id'];
            } else {
                throw new Exception('Token Verification failed , The user doesn't exist ');
//                $msg = [
//                    'status' => 1002,
//                    'msg' => 'Token Verification failed , The user doesn't exist '
//                ];
            }
        }  catch (\Firebase\JWT\ExpiredException $e) {
            throw new Exception('Token Be overdue ');
//            exit;
        } catch (\Exception $e) {
            throw new Exception('Token Invalid ');
        }
    }
}

middleware ：

  public function handle($request, \Closure $next)
    {
        $token=$_SERVER["HTTP_TOKEN"];
//        dd($token);
        try {
           $user_id=Jwt::verifyJwt($token);
           $request->user_id=$user_id;
        }catch (Exception $exception){
            return json(['token Acquisition failure ']);
        }
        return $next($request);
    }

}