注意：(该方式严重暴漏了appSecret，并不提倡使用js来进行access_token的获取！如果非得使用这种实现方式，则要保证js代码在使用时候的不可见！)

轻应用演示

获得token

获得context

获得的access_token

获得的上下文

var ticket=getUrlParam('ticket'),token;

function generateRandomString() {

return (Math.random().toString(36).substr(2));

}

// 使用CORS跨域认证

function gettoken(){

var timestamp = new Date().getTime();

var nonce = encodeURIComponent(generateRandomString());

var appid = encodeURIComponent("110110");

var appSecret = "110110";

var version = "1.1";

var array = new Array(version,timestamp, nonce, appid, appSecret);

array.sort();

var str = array.join("");

var sign = encodeURIComponent(CryptoJS.SHA1(str).toString());

var authorization = "OpenAuth2 version=\"" + version + "\", appid=\"" + appid + "\", timestamp=" + timestamp + ", nonce=\"" + nonce + "\", sign=\"" + sign + "\"";

var xhr = new XMLHttpRequest();

xhr.onreadystatechange = function() {

console.log(xhr.readyState);

if(xhr.readyState == 4) {

if(xhr.status == 200 || xhr.status == 304) {

var resp = JSON.parse(xhr.responseText);

$('#tk').html(JSON.stringify(resp));

if(resp != undefined && resp.success != undefined && resp.success && resp.data != undefined && resp.data.access_token != undefined ) {

token = resp.data.access_token;

}

}

}

};

var url = "http://do.yunzhijia.com/openauth2/api/appAuth2";

xhr.open("POST", url, false);

xhr.setRequestHeader("authorization", authorization);

xhr.send(null);

}

function getcontext(){

$.ajax({

type: "GET",

dataType:"JSON",

data:{

ticket:ticket,

"access_token":token

},

url: "http://do.yunzhijia.com/openauth2/api/getcontext"

}).done(function(ok) {

$('#ct').html('用户:'+ok.username+',企业:'+ok.eid)

$('#ct').html(JSON.stringify(ok))

}).fail(function(a) {

alert(a.responseText)

})

}

//获取url中的参数

function getUrlParam(name) {

var reg = new RegExp("(^|&)" + name + "=([^&]*)(&|$)"); //构造一个含有目标参数的正则表达式对象

var r = window.location.search.substr(1).match(reg); //匹配目标参数

if (r != null) return unescape(r[2]); return null; //返回参数值

}