django 钉钉登录

原理

先去获取钉钉用户信息，获取之后 去django User里面 查询 是否存在，不存在就创建，存在就正常登录。

根据唯一ID 进行判断

登录图

钉钉部分

请参考如下链接

django部分

login页面

url 是 登录请求处理页面

appid 是 钉钉 id

var url = encodeURIComponent('http://www.hequan.lol/login-dingding.html');

var goto = encodeURIComponent('https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=xxxxxxxxxxxxxxxxxxxxxxxx&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=' + url)

var obj = DDLogin({

id: "login_container",//这里需要你在自己的页面定义一个HTML标签并设置id，例如

goto: goto,

style: "border:none;background-color:#FFFFFF;",

width: "300",

height: "400"

});

var hanndleMessage = function (event) {

var origin = event.origin;

console.log("origin", event.origin);

if (origin == "https://login.dingtalk.com") { //判断是否来自ddLogin扫码事件。

var loginTmpCode = event.data; //拿到loginTmpCode后就可以在这里构造跳转链接进行跳转了

console.log("loginTmpCode", loginTmpCode);

var url2 = "https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=xxxxxxxxxxxxxxxxxxxxxxxx&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=" + url + "&loginTmpCode=" + loginTmpCode;

window.location.href = url2;

}

};

if (typeof window.addEventListener != 'undefined') {

window.addEventListener('message', hanndleMessage, false);

} else if (typeof window.attachEvent != 'undefined') {

window.attachEvent('onmessage', hanndleMessage);

}

views.py

appId 和 appSecret 是 钉钉信息

import requests

import random

def login_dingding(request):

if request.method == "GET":

code = request.GET.get('code', )

state = request.GET.get('state', )

appId = 'xxxxxxxxxxxxxxxxxxxxxxxxxxx'

appSecret = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'

token = requests.get(f'https://oapi.dingtalk.com/sns/gettoken?appid={appId}&appsecret={appSecret}')

access_token = token.json()["access_token"]

tmp_auth_code = requests.post(f"https://oapi.dingtalk.com/sns/get_persistent_code?access_token={access_token}",

json={

"tmp_auth_code": code

})

tmp_code = tmp_auth_code.json()

print(tmp_code)

openid = tmp_code['openid']

persistent_code = tmp_code['persistent_code']

sns_token_request = requests.post(f"https://oapi.dingtalk.com/sns/get_sns_token?access_token={access_token}",

json={

"openid": openid,

"persistent_code": persistent_code

})

sns_token = sns_token_request.json()['sns_token']

user_info_request = requests.get(f'https://oapi.dingtalk.com/sns/getuserinfo?sns_token={sns_token}')

user_info = user_info_request.json()['user_info']

print(user_info)

try:

user = User.objects.get(first_name=user_info['unionid'])

except Exception as e:

password = f'hequan{random.randint(1000,9999)}'

try:

user = User.objects.create(username=user_info['nick'], password=password,

first_name=user_info['unionid'])

except Exception as e:

user = User.objects.create(username=f"{user_info['nick']}{random.randint(0,9999)}", password=password,

first_name=user_info['unionid'])

finally:

login(request, user)

request.session['is_login'] = True

login_ip = request.META['REMOTE_ADDR']

LoginLogs.objects.create(user=request.user, ip=login_ip)

return redirect('/index.html')