mirror of https://github.com/mindoc-org/mindoc.git
286 lines
8.5 KiB
Go
286 lines
8.5 KiB
Go
|
package wecom
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"bytes"
|
|||
|
|
"context"
|
|||
|
|
"encoding/json"
|
|||
|
|
"errors"
|
|||
|
|
"fmt"
|
|||
|
|
"github.com/mindoc-org/mindoc/utils/auth2"
|
|||
|
|
"net/http"
|
|||
|
|
"net/url"
|
|||
|
|
"time"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// doc
|
|||
|
|
// - 全局错误码: https://work.weixin.qq.com/api/doc/90000/90139/90313
|
|||
|
|
|
|||
|
|
const (
|
|||
|
|
AppName = "workwx"
|
|||
|
|
|
|||
|
|
auth2Url = "https://open.weixin.qq.com/connect/oauth2/authorize"
|
|||
|
|
ssoUrl = "https://login.work.weixin.qq.com/wwlogin/sso/login"
|
|||
|
|
callbackState = "mindoc"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
type BasicResponse struct {
|
|||
|
|
ErrCode int `json:"errcode"`
|
|||
|
|
ErrMsg string `json:"errmsg"`
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (r *BasicResponse) Error() string {
|
|||
|
|
return fmt.Sprintf("errcode=%d,errmsg=%s", r.ErrCode, r.ErrMsg)
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (r *BasicResponse) AsError() error {
|
|||
|
|
if r == nil {
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if r.ErrCode != 0 {
|
|||
|
|
return r
|
|||
|
|
}
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 获取用户Id-请求响应结构
|
|||
|
|
type UserIdResponse struct {
|
|||
|
|
// 接口文档: https://developer.work.weixin.qq.com/document/path/91023
|
|||
|
|
*BasicResponse
|
|||
|
|
|
|||
|
|
UserId string `json:"userid"` // 企业成员UserID
|
|||
|
|
UserTicket string `json:"user_ticket"` // 用于获取敏感信息
|
|||
|
|
OpenId string `json:"openid"` // 非企业成员的标识，对当前企业唯一
|
|||
|
|
ExternalUserId string `json:"external_userid"` // 外部联系人ID
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 获取用户信息-请求响应结构
|
|||
|
|
type UserInfoResponse struct {
|
|||
|
|
// 接口文档: https://developer.work.weixin.qq.com/document/path/90196
|
|||
|
|
*BasicResponse
|
|||
|
|
|
|||
|
|
UserId string `json:"userid"` // 企业成员UserID
|
|||
|
|
Name string `json:"name"` // 成员名称
|
|||
|
|
Department []int `json:"department"` // 成员所属部门id列表
|
|||
|
|
IsLeaderInDept []int `json:"is_leader_in_dept"` // 表示在所在的部门内是否为上级
|
|||
|
|
IsLeader int `json:"isleader"` // 是否是部门上级(领导)
|
|||
|
|
Alias string `json:"alias"` // 别名
|
|||
|
|
Status int `json:"status"` // 激活状态: 1=已激活，2=已禁用，4=未激活，5=退出企业
|
|||
|
|
MainDepartment int `json:"main_department"` // 主部门
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
type UserPrivateInfoResponse struct {
|
|||
|
|
// 文档地址: https://developer.work.weixin.qq.com/document/path/95833
|
|||
|
|
*BasicResponse
|
|||
|
|
|
|||
|
|
UserId string `json:"userid"` // 企业成员userid
|
|||
|
|
Gender string `json:"gender"` // 成员性别
|
|||
|
|
Avatar string `json:"avatar"` // 头像
|
|||
|
|
QrCode string `json:"qr_code"` // 二维码
|
|||
|
|
Mobile string `json:"mobile"` // 手机号
|
|||
|
|
Mail string `json:"mail"` // 邮箱
|
|||
|
|
BizMail string `json:"biz_mail"` // 企业邮箱
|
|||
|
|
Address string `json:"address"` // 地址
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 访问凭据缓存-结构
|
|||
|
|
type AccessToken struct {
|
|||
|
|
*BasicResponse
|
|||
|
|
|
|||
|
|
AccessToken string `json:"access_token"`
|
|||
|
|
ExpiresIn int `json:"expires_in"`
|
|||
|
|
|
|||
|
|
createTime time.Time `json:"create_time"`
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (a AccessToken) GetToken() string {
|
|||
|
|
return a.AccessToken
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (a AccessToken) GetExpireIn() time.Duration {
|
|||
|
|
return time.Duration(a.ExpiresIn) * time.Second
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (a AccessToken) GetExpireTime() time.Time {
|
|||
|
|
return a.createTime.Add(a.GetExpireIn())
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 企业微信用户敏感信息-结构
|
|||
|
|
type WorkWeixinUserPrivateInfo struct {
|
|||
|
|
UserId string `json:"userid"` // 企业成员userid
|
|||
|
|
Name string `json:"name"` // 姓名
|
|||
|
|
Gender string `json:"gender"` // 成员性别
|
|||
|
|
Avatar string `json:"avatar"` // 头像
|
|||
|
|
QrCode string `json:"qr_code"` // 二维码
|
|||
|
|
Mobile string `json:"mobile"` // 手机号
|
|||
|
|
Mail string `json:"mail"` // 邮箱
|
|||
|
|
BizMail string `json:"biz_mail"` // 企业邮箱
|
|||
|
|
Address string `json:"address"` // 地址
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 企业微信用户信息-结构
|
|||
|
|
type WorkWeixinUserInfo struct {
|
|||
|
|
UserId string `json:"UserId"` // 企业成员UserID
|
|||
|
|
Name string `json:"name"` // 成员名称
|
|||
|
|
HideMobile int `json:"hide_mobile"` // 是否隐藏了手机号码
|
|||
|
|
Mobile string `json:"mobile"` // 手机号码
|
|||
|
|
Department []int `json:"department"` // 成员所属部门id列表
|
|||
|
|
Email string `json:"email"` // 邮箱
|
|||
|
|
IsLeaderInDept []int `json:"is_leader_in_dept"` // 表示在所在的部门内是否为上级
|
|||
|
|
IsLeader int `json:"isleader"` // 是否是部门上级(领导)
|
|||
|
|
Avatar string `json:"avatar"` // 头像url
|
|||
|
|
Alias string `json:"alias"` // 别名
|
|||
|
|
Status int `json:"status"` // 激活状态: 1=已激活，2=已禁用，4=未激活，5=退出企业
|
|||
|
|
MainDepartment int `json:"main_department"` // 主部门
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func NewClient(corpId, appId, appSecrete string) auth2.Client {
|
|||
|
|
return NewWorkWechatClient(corpId, appId, appSecrete)
|
|||
|
|
}
|
|||
|
|
func NewWorkWechatClient(corpId, appId, appSecrete string) *WorkWechatClient {
|
|||
|
|
return &WorkWechatClient{
|
|||
|
|
CorpId: corpId,
|
|||
|
|
AppId: appId,
|
|||
|
|
AppSecret: appSecrete,
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
type WorkWechatClient struct {
|
|||
|
|
CorpId string
|
|||
|
|
AppId string
|
|||
|
|
AppSecret string
|
|||
|
|
|
|||
|
|
token auth2.IAccessToken
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) GetAccessToken(ctx context.Context) (auth2.IAccessToken, error) {
|
|||
|
|
if c.token != nil {
|
|||
|
|
return c.token, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
endpoint := fmt.Sprintf("https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=%s&corpsecret=%s", c.CorpId, c.AppSecret)
|
|||
|
|
req, _ := http.NewRequestWithContext(ctx, http.MethodGet, endpoint, nil)
|
|||
|
|
|
|||
|
|
var token AccessToken
|
|||
|
|
if err := auth2.Request(req, &token); err != nil {
|
|||
|
|
return token, err
|
|||
|
|
}
|
|||
|
|
token.createTime = time.Now()
|
|||
|
|
return token, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) SetAccessToken(token auth2.IAccessToken) {
|
|||
|
|
c.token = token
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) BuildURL(callback string, isAppBrowser bool) string {
|
|||
|
|
var endpoint string
|
|||
|
|
if isAppBrowser {
|
|||
|
|
// 企业微信内-网页授权登录
|
|||
|
|
urlFmt := "%s?appid=%s&agentid=%s&redirect_uri=%s&response_type=code&scope=snsapi_privateinfo&state=%s#wechat_redirect"
|
|||
|
|
endpoint = fmt.Sprintf(urlFmt, auth2Url, c.CorpId, c.AppId, url.PathEscape(callback), callbackState)
|
|||
|
|
} else {
|
|||
|
|
// 浏览器内-扫码授权登录
|
|||
|
|
urlFmt := "%s?login_type=CorpApp&appid=%s&agentid=%s&redirect_uri=%s&state=%s"
|
|||
|
|
endpoint = fmt.Sprintf(urlFmt, ssoUrl, c.CorpId, c.AppId, url.PathEscape(callback), callbackState)
|
|||
|
|
}
|
|||
|
|
return endpoint
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) ValidateCallback(state string) error {
|
|||
|
|
if state != callbackState {
|
|||
|
|
return errors.New("auth2.state.wrong")
|
|||
|
|
}
|
|||
|
|
return nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) getUserId(ctx context.Context, code string) (UserIdResponse, error) {
|
|||
|
|
var userId UserIdResponse
|
|||
|
|
|
|||
|
|
token, err := c.GetAccessToken(ctx)
|
|||
|
|
if err != nil {
|
|||
|
|
return userId, err
|
|||
|
|
}
|
|||
|
|
endpoint := fmt.Sprintf("https://qyapi.weixin.qq.com/cgi-bin/auth/getuserinfo?access_token=%s&code=%s", token.GetToken(), code)
|
|||
|
|
req, _ := http.NewRequestWithContext(ctx, http.MethodGet, endpoint, nil)
|
|||
|
|
|
|||
|
|
if err := auth2.Request(req, &userId); err != nil {
|
|||
|
|
return userId, err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if userId.UserId == "" {
|
|||
|
|
return userId, errors.New("auth2.userid.empty")
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
return userId, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) getUserInfo(ctx context.Context, userid string) (UserInfoResponse, error) {
|
|||
|
|
var userInfo UserInfoResponse
|
|||
|
|
token, err := c.GetAccessToken(ctx)
|
|||
|
|
if err != nil {
|
|||
|
|
return userInfo, err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
endpoint := fmt.Sprintf("https://qyapi.weixin.qq.com/cgi-bin/user/get?access_token=%s&userid=%s", token.GetToken(), userid)
|
|||
|
|
req, _ := http.NewRequestWithContext(ctx, http.MethodGet, endpoint, nil)
|
|||
|
|
|
|||
|
|
if err := auth2.Request(req, &userInfo); err != nil {
|
|||
|
|
return userInfo, err
|
|||
|
|
}
|
|||
|
|
return userInfo, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) getUserPrivateInfo(ctx context.Context, ticket string) (UserPrivateInfoResponse, error) {
|
|||
|
|
var userInfo UserPrivateInfoResponse
|
|||
|
|
|
|||
|
|
token, err := c.GetAccessToken(ctx)
|
|||
|
|
if err != nil {
|
|||
|
|
return userInfo, err
|
|||
|
|
}
|
|||
|
|
endpoint := fmt.Sprintf("https://qyapi.weixin.qq.com/cgi-bin/auth/getuserdetail?access_token=%s", token.GetToken())
|
|||
|
|
|
|||
|
|
b, _ := json.Marshal(map[string]string{
|
|||
|
|
"user_ticket": ticket,
|
|||
|
|
})
|
|||
|
|
|
|||
|
|
req, _ := http.NewRequestWithContext(ctx, http.MethodPost, endpoint, bytes.NewBuffer(b))
|
|||
|
|
|
|||
|
|
if err := auth2.Request(req, &userInfo); err != nil {
|
|||
|
|
return userInfo, err
|
|||
|
|
}
|
|||
|
|
return userInfo, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (c *WorkWechatClient) GetUserInfo(ctx context.Context, code string) (auth2.UserInfo, error) {
|
|||
|
|
var info auth2.UserInfo
|
|||
|
|
|
|||
|
|
userid, err := c.getUserId(ctx, code)
|
|||
|
|
if err != nil {
|
|||
|
|
return info, err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
userInfo, err := c.getUserInfo(ctx, userid.UserId)
|
|||
|
|
if err != nil {
|
|||
|
|
return info, err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
info.UserId = userInfo.UserId
|
|||
|
|
info.Name = userInfo.Name
|
|||
|
|
|
|||
|
|
if userid.UserTicket == "" {
|
|||
|
|
return info, nil
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
private, err := c.getUserPrivateInfo(ctx, userid.UserTicket)
|
|||
|
|
if err != nil {
|
|||
|
|
return info, err
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
info.Mail = private.BizMail
|
|||
|
|
info.Avatar = private.Avatar
|
|||
|
|
info.Mobile = private.Mobile
|
|||
|
|
return info, nil
|
|||
|
|
}
|