public bool OAuthAccess()
{
var app = OAuthAppCache.Instance.Find(it => it.APP_CODE.Equals(this._appid));
if (app == null)
{
Alert("无效的应用编号");
return(false);
}
Tauth_Code daCode = new Tauth_Code();
if (!daCode.SelectByAppId_GrantCode(app.APP_ID, this._auth_code))
{
Alert("无效的授权码");
return(false);
}
if (daCode.Status == 1)
{
Alert("该授权码已被使用，不能重复使用");
return(false);
}
if (daCode.Expire_Time < DateTime.Now)
{
Alert("授权码已过期");
return(false);
}
daCode.Status = 1;
if (!daCode.Update())
{
Alert("授权码验证失败");
return(false);
}
int user_id = daCode.User_Id;
var fac = UserModuleFactory.GetUserModuleInstance();
IUser user = fac?.GetUserByID(user_id);
if (user == null)
{
Alert("用户不存在");
return(false);
}
string open_id = xUtils.EncryptOpenId(app.APP_ID, user_id, app.UID_ENCRYPT_KEY);
this.OAuthUser.Open_Id = open_id;
this.OAuthUser.Token = xUtils.EncryptAccessToken(user_id, user.UserCode, app.APP_ID);
this.OAuthUser.Refresh_Token = xUtils.EncryptAccessToken(user_id, user.UserCode, app.APP_ID, 2592000);
BeginTransaction();
Tauth_Token daToken = new Tauth_Token();
daToken.ReferenceTransactionFrom(Transaction);
bool exist = daToken.SelectByAppId_UserId(app.APP_ID, user_id);
daToken.App_Id = app.APP_ID;
daToken.Expire_Time = DateTime.Now.AddSeconds(this.OAuthUser.Expire_In);
daToken.Refresh_Timeout = DateTime.Now.AddDays(this.OAuthUser.Refresh_Expire_In);
daToken.Refresh_Token = this.OAuthUser.Refresh_Token;
daToken.Token_Code = this.OAuthUser.Token;
daToken.Scope_Id = daCode.Scope_Id;
daToken.User_Id = user_id;
daToken.Grant_Id = daCode.Auth_Id;
if (exist)
{
if (!daToken.Update())
{
Rollback();
Alert("TOKEN生成失败");
return(false);
}
}
else
{
if (!daToken.Insert())
{
Rollback();
Alert("TOKEN生成失败");
return(false);
}
}
if (!UpdateTokenRights(daToken.Token_Id, daToken.Refresh_Timeout, daCode.Right_Json))
{
Rollback();
return(false);
}
Commit();
return(true);
}
public bool Refresh()
{
var app = OAuthAppCache.Instance.Find(it => it.APP_CODE == this._appid);
if (app == null)
{
Alert((ResultType)ResponseCode.应用ID无效, "未知的应用ID");
return(false);
}
var DecryptRes = xUtils.DecryptAccessToken(this._refresh_token);
if (!DecryptRes.Success)
{
Alert((ResultType)ResponseCode.无效操作, DecryptRes.Message);
return(false);
}
UserToken token = DecryptRes.Content;
if (token.Expire_Time < DateTime.Now)
{
Alert((ResultType)ResponseCode.令牌已过期, "令牌已过期，请重新发起用户授权");
return(false);
}
Tauth_Token daToken = new Tauth_Token();
if (!daToken.SelectByAppId_UserId(app.APP_ID, token.UserId))
{
Alert((ResultType)ResponseCode.Token错误, "未找到授权记录，无效的刷新令牌");
return(false);
}
if (!daToken.Refresh_Token.Equals(this._refresh_token))
{
Alert((ResultType)ResponseCode.无效操作, "无效的刷新令牌");
return(false);
}
if (daToken.Refresh_Timeout < DateTime.Now)
{
Alert((ResultType)ResponseCode.令牌已过期, "令牌已过期，请重新发起用户授权");
return(false);
}
var fac = UserModuleFactory.GetUserModuleInstance();
IUser user = fac?.GetUserByID(daToken.User_Id);
if (user == null)
{
Alert("用户不存在");
return(false);
}
string newToken = xUtils.EncryptAccessToken(token.UserId, user.UserCode, app.APP_ID);
daToken.Token_Code = newToken;
daToken.Expire_Time = DateTime.Now.AddSeconds(this.OAuthUser.Expire_In);
if (!daToken.Update())
{
Alert((ResultType)ResponseCode.务器错误, "Token刷新失败，请重试");
return(false);
}
this.OAuthUser.Open_Id = xUtils.EncryptOpenId(app.APP_ID, token.UserId, app.UID_ENCRYPT_KEY);
this.OAuthUser.Token = newToken;
this.OAuthUser.Refresh_Token = this._refresh_token;
this.OAuthUser.Refresh_Expire_In = (int)(daToken.Refresh_Timeout - DateTime.Now).TotalDays;
return(true);
}