官网地址

类代码如下

use app\ks\controller\errorCode AS ErrorCode;

class WXBizDataCrypt extends \app\ks\controller\Base

{

private $appid;

private $sessionKey;

private $appsecret;

/**

* 构造函数

* @param $sessionKey string 用户在小程序登录后获取的会话密钥

* @param $appid string 小程序的appid

*/

public function __construct($code)

{

$wechat = config("wechat");

$this->appid = $wechat['appkey'];

$this->appsecret = $wechat['appsecret'];

$this->sessionKey = $this->getSessionKey($code);

}

/**

* 检验数据的真实性，并且获取解密后的明文.

* @param $encryptedData string 加密的用户数据

* @param $iv string 与用户数据一同返回的初始向量

* @param $data string 解密后的原文

*

* @return int 成功0，失败返回对应的错误码

*/

public function decryptData( $encryptedData, $iv, &$data )

{

if (strlen($this->sessionKey) != 24) {

return ErrorCode::$IllegalAesKey;

}

$aesKey=base64_decode($this->sessionKey);

if (strlen($iv) != 24) {

return ErrorCode::$IllegalIv;

}

$aesIV=base64_decode($iv);

$aesCipher=base64_decode($encryptedData);

$result=openssl_decrypt( $aesCipher, "AES-128-CBC", $aesKey, 1, $aesIV);

$dataObj=json_decode( $result );

if( $dataObj == NULL )

{

return ErrorCode::$IllegalBuffer;

}

if( $dataObj->watermark->appid != $this->appid )

{

return ErrorCode::$IllegalBuffer;

}

$data = $result;

return ErrorCode::$OK;

}

public function getSessionKey($code)

{

$url = 'https://api.weixin.qq.com/sns/jscode2session?appid='.$this->appid.'&secret='.$this->appsecret.'&js_code='.$code.'&grant_type=authorization_code';

$data = self::http_request($url);

$data = json_decode($data,true);

if($data['errcode'] == 0){

$sessinKay = $data['session_key'];

}else{

ajaxError('获取步数失败',$data['errmsg']);

}

return $sessinKay;

}

}

ErrorCode

/**

* error code 说明.

*

*

-41001: encodingAesKey 非法

*

-41003: aes 解密失败

*

-41004: 解密后得到的buffer非法

*

-41005: base64加密失败

*

-41016: base64解密失败

*

*/

class ErrorCode

{

public static $OK = 0;

public static $IllegalAesKey = -41001;

public static $IllegalIv = -41002;

public static $IllegalBuffer = -41003;

public static $DecodeBase64Error = -41004;

}

?>

调用

public static function getStep($input)

{

$pc = new WXBizDataCrypt($input['code']);

$errCode = $pc->decryptData($input['encryptedData'], $input['iv'], $data );

if ($errCode == 0) {

$stepList = json_decode($data,true);

return $stepList

} else {

$result['error'] = $errCode;

return $result;

}

}