package com.example.demo.controller;
import com.example.demo.dto.Code2SessionResponse;
import com.example.demo.entity.User;
import com.example.demo.service.RedisService;
import com.example.demo.service.RedisServiceImpl;
import com.example.demo.service.UserService;
import com.fasterxml.jackson.core.JsonProcessingException;
import com.fasterxml.jackson.databind.ObjectMapper;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.http.HttpStatus;
import org.springframework.http.ResponseEntity;
import org.springframework.web.bind.annotation.*;
import org.springframework.web.client.RestTemplate;
import java.util.Map;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
@RestController
@RequestMapping("/auth")
public class AuthController {
private static final Logger logger = LoggerFactory.getLogger(RedisServiceImpl.class); // 创建 Logger 实例
@Autowired
private UserService userService;
@Autowired
private RedisService redisService;
private final String APP_ID = "wx792c8ea56d700e6f"; // 微信小程序的 AppID
private final String APP_SECRET = "bbed35c3f43613b44845e7a2859c2058"; // 微信小程序的 AppSecret
@PostMapping("/login")
public ResponseEntity<?> login(@RequestBody Map<String, String> request) {
String code = request.get("code");
if (code == null || code.isEmpty()) {
return ResponseEntity.badRequest().body("Missing code");
}
// 1.1 构造微信 API 请求 URL
String url = String.format("https://api.weixin.qq.com/sns/jscode2session?appid=%s&secret=%s&js_code=%s&grant_type=authorization_code",
APP_ID, APP_SECRET, code);
RestTemplate restTemplate = new RestTemplate();
ResponseEntity<String> response;
try {
// 1.2 调用微信的 code2Session 接口
response = restTemplate.getForEntity(url, String.class);
logger.info("成功获取微信API响应 response : {}", response);
} catch (Exception e) {
return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).body("请求微信 API 失败: " + e.getMessage());
}
if (response.getStatusCode() != HttpStatus.OK) {
return ResponseEntity.status(response.getStatusCode()).body("请求微信 API 失败");
}
// 2. 使用 code2SessionResponse（dto） 进行响应解析
String responseBody = response.getBody(); // 获取响应体
ObjectMapper objectMapper = new ObjectMapper(); // 使用 Jackson 进行 JSON 解析
Code2SessionResponse code2SessionResponse;
try {
code2SessionResponse = objectMapper.readValue(responseBody, Code2SessionResponse.class);
} catch (JsonProcessingException e) {
return ResponseEntity.badRequest().body("解析响应失败: " + e.getMessage());
}
if (code2SessionResponse != null) {
if (code2SessionResponse.isSuccessful()) {
// 3. 数据库查询或存储
User user = userService.loginOrRegister(code2SessionResponse.getOpenid());
// 存储或更新 session_key，设置过期时间为 30 分钟
redisService.storeOrUpdateSession(code2SessionResponse.getOpenid(), code2SessionResponse.getSession_key(), 30);
return ResponseEntity.ok(Map.of("openid", code2SessionResponse.getOpenid()));
} else {
return handleErrorResponse(code2SessionResponse);
}
} else {
return ResponseEntity.badRequest().body("获取 OpenID 失败，未返回有效数据");
}
}
private ResponseEntity<String> handleErrorResponse(Code2SessionResponse response) {
int errcode = response.getErrcode();
String errmsg = response.getErrmsg();
switch (errcode) {
case 40029:
return ResponseEntity.badRequest().body("错误：js_code无效");
case 45011:
return ResponseEntity.status(HttpStatus.TOO_MANY_REQUESTS).body("错误：API 调用太频繁，请稍候再试");
case 40226:
return ResponseEntity.status(HttpStatus.FORBIDDEN).body("错误：高风险等级用户，小程序登录拦截");
case -1:
return ResponseEntity.status(HttpStatus.INTERNAL_SERVER_ERROR).body("错误：系统繁忙，请稍候再试");
default:
return ResponseEntity.badRequest().body("获取 OpenID 失败: " + errmsg);
}
}
// TODO
// @PostMapping("/register") // 完整路径为 /auth/register
// public ResponseEntity<?> register(@RequestBody RegisterRequest request) {
// // 注册逻辑
// return null;
// }
//
// @PostMapping("/logout") // 完整路径为 /auth/logout
// public ResponseEntity<?> logout(@RequestBody LogoutRequest request) {
// // 注销逻辑
// return null;
// }
//
// @PostMapping("/reset-password") // 完整路径为 /auth/reset-password
// public ResponseEntity<?> resetPassword(@RequestBody ResetPasswordRequest request) {
// // 密码重置逻辑
// return null;
// }
}
orderAssistant.zip （65个子文件） 
orderAssistant 
.DS_Store 6KB orderAssistantWechat sitemap.json 191B project.private.config.json 365B pages index index.wxml 1KB index.js 3KB index.json 30B index.wxss 862B logs logs.json 30B logs.js 305B logs.wxml 224B logs.wxss 247B .eslintrc.js 587B app.json 348B project.config.json 532B app.js 1KB utils util.js 460B app.wxss 194B orderAssistantServer .DS_Store 6KB HELP.md 2KB mvnw.cmd 7KB pom.xml 2KB src test java com example demo DemoApplicationTests.java 205B main resources application.properties 368B templates static java com example demo DemoApplication.java 305B TestController.java 330B repository UserRepository.java 311B controller UserController.java 525B AuthController.java 5KB service UserService.java 196B RedisServiceImpl.java 2KB UserServiceImpl.java 1KB RedisService.java 240B entity User.java 843B dto Code2SessionResponse.java 1KB .mvn wrapper maven-wrapper.properties 952B .idea jarRepositories.xml 845B uiDesigner.xml 9KB workspace.xml 5KB misc.xml 438B compiler.xml 688B .gitignore 47B encodings.xml 186B target classes application.properties 368B com example demo repository UserRepository.class 546B DemoApplication.class 733B controller AuthController.class 6KB UserController.class 952B TestController.class 760B service RedisService.class 421B UserService.class 338B RedisServiceImpl.class 2KB UserServiceImpl.class 3KB entity User.class 1KB dto Code2SessionResponse.class 2KB .DS_Store 6KB demo-0.0.1-SNAPSHOT.jar.original 13KB test-classes com example demo DemoApplicationTests.class 531B maven-status maven-compiler-plugin compile default-compile createdFiles.lst 489B inputFiles.lst 1KB testCompile default-testCompile createdFiles.lst 44B inputFiles.lst 120B maven-archiver pom.properties 59B generated-test-sources test-annotations generated-sources annotations 
demo-0.0.1-SNAPSHOT.jar 55.34MB mvnw 10KB .gitignore 395B资源评论
