django 钉钉登录

原理

先去获取钉钉用户信息，获取之后 去django User里面 查询 是否存在，不存在就创建，存在就正常登录。
根据唯一ID 进行判断

登录图

钉钉部分

请参考如下链接

https://open-doc.dingtalk.com/microapp/serverapi2/kymkv6

django部分

login页面

url 是 登录请求处理页面
appid 是 钉钉 id

<div id="login_container"></div><script src="http://g.alicdn.com/dingding/dinglogin/0.0.5/ddLogin.js"></script>
<script>var url = encodeURIComponent('http://www.hequan.lol/login-dingding.html');var goto = encodeURIComponent('https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=xxxxxxxxxxxxxxxxxxxxxxxx&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=' + url)var obj = DDLogin({id: "login_container",//这里需要你在自己的页面定义一个HTML标签并设置id，例如<div id="login_container"></div>或<span id="login_container"></span>goto: goto, style: "border:none;background-color:#FFFFFF;",width: "300",height: "400"});var hanndleMessage = function (event) {var origin = event.origin;console.log("origin", event.origin);if (origin == "https://login.dingtalk.com") { //判断是否来自ddLogin扫码事件。var loginTmpCode = event.data; //拿到loginTmpCode后就可以在这里构造跳转链接进行跳转了console.log("loginTmpCode", loginTmpCode);var url2 = "https://oapi.dingtalk.com/connect/oauth2/sns_authorize?appid=xxxxxxxxxxxxxxxxxxxxxxxx&response_type=code&scope=snsapi_login&state=STATE&redirect_uri=" + url + "&loginTmpCode=" + loginTmpCode;window.location.href = url2;}};if (typeof window.addEventListener != 'undefined') {window.addEventListener('message', hanndleMessage, false);} else if (typeof window.attachEvent != 'undefined') {window.attachEvent('onmessage', hanndleMessage);}</script>

views.py

appId 和 appSecret 是 钉钉信息

import requests
import randomdef login_dingding(request):if request.method == "GET":code = request.GET.get('code', )state = request.GET.get('state', )appId = 'xxxxxxxxxxxxxxxxxxxxxxxxxxx'appSecret = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'token = requests.get(f'https://oapi.dingtalk.com/sns/gettoken?appid={appId}&appsecret={appSecret}')access_token = token.json()["access_token"]tmp_auth_code = requests.post(f"https://oapi.dingtalk.com/sns/get_persistent_code?access_token={access_token}",json={"tmp_auth_code": code})tmp_code = tmp_auth_code.json()print(tmp_code)openid = tmp_code['openid']persistent_code = tmp_code['persistent_code']sns_token_request = requests.post(f"https://oapi.dingtalk.com/sns/get_sns_token?access_token={access_token}",json={"openid": openid,"persistent_code": persistent_code})sns_token = sns_token_request.json()['sns_token']user_info_request = requests.get(f'https://oapi.dingtalk.com/sns/getuserinfo?sns_token={sns_token}')user_info = user_info_request.json()['user_info']print(user_info)try:user = User.objects.get(first_name=user_info['unionid'])except Exception as e:password = f'hequan{random.randint(1000,9999)}'try:user = User.objects.create(username=user_info['nick'], password=password,first_name=user_info['unionid'])except Exception as e:user = User.objects.create(username=f"{user_info['nick']}{random.randint(0,9999)}", password=password,first_name=user_info['unionid'])finally:login(request, user)request.session['is_login'] = Truelogin_ip = request.META['REMOTE_ADDR']LoginLogs.objects.create(user=request.user, ip=login_ip)return redirect('/index.html')