微信⼩程序开发5后端解析wx.getUserInfor中的⽤户信息,微信⼩程序⽀付后端，如何解析wx.getUserInfor中的⽤户信息。
1 我们⽤encryptedData和iv,进⾏解密，必须要⽤到session_key，所以⽤必须是登⼊状态。
2 但是session_key是有有效期。
⽽且session_key的有效期，不是⼀个固定值，他是通过⽤户⾏为来决定，session_key的有效期时间。
3 但是我们可以通过wx.checkSession来判断有没有过期。
4 保证session_key没有过期的情况下。
我们将iv,encryptedData,token(登⼊凭证）发送到后端.5 后端使⽤官⽅提供的sdk，进⾏解密。
地址 https:///miniprogram/dev/framework/open-ability/signature.html6 解密成功以后保存到数据，数据库的字符集⼀定要是utf8mb4，因为utf8默认是3字节，微信这类带表情包名字必须4字节才能保存表情包没有敏感信息，⽆法获得⽤户信息可以得到⽤户信息数据库utf8mb4：当要⽤到微信名字，表情包时，创建数据库设为utf8mb4格式django中settings⽂件配置import pymysqlpymysql.install_as_MySQLdb()DATABASES = {'default': {'ENGINE': 'django.db.backends.mysql','NAME': 'python13','USER':'root','PASSWORD':'','HOST':'127.0.0.1','PORT': 3306,'OPTIONS': {'charset': 'utf8mb4'}, # 设为4字节，兼容符号 }}如官⽅的sdk没有Crypto包⽤下⾯的⽅法解决：pip install pycryptodome代码⽰例：微信⼩程序前端：app.js//app.jsApp({/*当⼩程序初始化完成，会触发onlaunch（全局只触发⼀次） */onLaunch: function () {// 登录this.my_login()//this 就是当前app对象},my_login:function(){let that = thiswx.login({success: res => {// 发送 res.code 到后台换取 openId, sessionKey, unionId console.log(res.code)wx.request({url: that.globalData.baseurl + 'login/',data: { 'code': res.code },method: "POST",success(e) {}})}})console.log("⼩程序的初始化：onlaunch")},/**可以在全局使⽤ */globalData: {userInfo: null,baseurl:"http://127.0.0.1:8000/"}})test3.wxml<button open-type="getUserInfo" bindgetuserinfo='user1'>⽤户信息</button> test3.js// pages/test3/test3.jsconst app = getApp() // 引⽤app模块Page({user1:function(e){// this 当前页⾯，也就是page对象// console.log('e', e.detail) // 等同于wx.getUserInfo⽅法wx.getSetting({success(res) {if (res.authSetting['erInfo']) { // 获取⽤户信息权限wx.checkSession({ // 确认⽤户session_key有⽆过期success() {//session_key 未过期，并且在本⽣命周期⼀直有效wx.getUserInfo({success: (res) => {console.log('res', res) // 这个res⾥⾯就是⽤户信息// 将数据发送到后端wx.request({// 这⾥是发送iv,encryptedDataurl: app.globalData.baseurl+'getinfo/',data:{iv:res.iv,encryptedData:res.encryptedData,token: wx.getStorageSync('token')},method:"POST",success:(e) => {console.log('后台返回的数据',e)}})}})},fail() {// session_key 已经失效，需要重新执⾏登录流程app.my_login() // 通过开头导⼊const app = getApp()，获取app对象 wx.getUserInfo({success: (res) => {console.log('res', res) // 这个res⾥⾯就是⽤户信息////这⾥是发送iv,encryptedData,还没写wx.request({url: 'url',})}})}})}}})},})django后端：urls.pyfrom django.conf.urls import urlfrom django.contrib import adminfrom app01.views import test,user,payurlpatterns = [url(r'^admin/', admin.site.urls),url(r'^getinfo/', .as_view()),url(r'^pay/',pay.Pay.as_view())]views/user.pyfrom rest_framework.views import APIViewfrom rest_framework.response import Responsefrom app01.wx import wx_loginfrom django.core.cache import cacheimport hashlib,timefrom app01.models import Wxuserfrom app01.wx import WXBizDataCryptfrom app01.my_ser import wx_user_serclass Login(APIView):def post(self,request):param = request.dataif not param.get("code"):return Response({"status":1,"msg":"缺少参数"})else:code = param.get("code")user_data = wx_login.get_login_info(code)if user_data:val = user_data['session_key'] +"&"+user_data['openid']md5 = hashlib.md5()md5.update(str(time.clock()).encode("utf-8")) # 当前cpu的时间 md5.update(user_data['session_key'].encode("utf-8"))key = md5.hexdigest()cache.set(key,val,7200)has_user = Wxuser.objects.filter(openid=user_data['openid']).first() if not has_user:Wxuser.objects.create(openid=user_data['openid'])return Response({"status":0,"msg":"ok","data":{"token":key}return Response({"status":2,"msg":"⽆效的code"})class Info(APIView):def post(self,request):param = request.dataif param.get('iv') and param.get('token') and param.get('encryptedData'):session_key_openid = cache.get(param.get('token'))if session_key_openid:session_key,openid = session_key_openid.split('&')# 解密user_info = WXBizDataCrypt.WXBizDataCrypt.get_info(session_key,param.get('encryptedData'),param.get('iv'))save_data = {"name": user_info['nickName'],"avatar": user_info['avatarUrl'],"language": user_info['language'],"province": user_info['province'],"city": user_info['city'],"country": user_info['country'],}Wxuser.objects.filter(openid=openid).update(**save_data)user = Wxuser.objects.filter(openid=openid).first()user = wx_user_ser(instance=user,many=False).datareturn Response({'status':0,'msg':'ok','data':user})else:return Response({'code':2,'msg':'⽆效的token'})else:return Response({'code':1,'msg':'缺少参数'})wx/settings.pyAppId="..."AppSecret='...'code2Session = 'https:///sns/jscode2session?appid={}&secret={}&js_code={}&grant_type=authorization_code' pay_mchid ='1415981402'pay_apikey = 'xi34nu5jn7x2uujd8u4jiijd2u5d6j8e'wx/wx_login.pyfrom app01.wx import settingsimport requestsdef get_login_info(code):code_url = settings.code2Session.format(settings.AppId,settings.AppSecret,code)response = requests.get(code_url)json_response = response.json() # 把json格式数据转换为字典print("json_response",json_response)if json_response.get("session_key"):return json_responseelse:return Falsewx/WXBizDataCrypt.pyimport base64import jsonfrom Crypto.Cipher import AESfrom app01.wx import settingsclass WXBizDataCrypt:def__init__(self, appId, sessionKey):self.appId = appIdself.sessionKey = sessionKeydef decrypt(self, encryptedData, iv):# base64 decodesessionKey = base64.b64decode(self.sessionKey)encryptedData = base64.b64decode(encryptedData)iv = base64.b64decode(iv)cipher = AES.new(sessionKey, AES.MODE_CBC, iv)decrypted = json.loads(self._unpad(cipher.decrypt(encryptedData))) if decrypted['watermark']['appid'] != self.appId:raise Exception('Invalid Buffer')return decrypteddef _unpad(self, s):return s[:-ord(s[len(s)-1:])]@classmethoddef get_info(cls,sessionKey,encryptedData,iv):return cls(settings.AppId, sessionKey).decrypt(encryptedData, iv) models.pyfrom django.db import models# Create your models here.class Wxuser(models.Model):id = models.AutoField(primary_key=True)openid=models.CharField(max_length=255)name = models.CharField(max_length=50)avatar = models.CharField(max_length=200)language = models.CharField(max_length=50)province = models.CharField(max_length=50)city = models.CharField(max_length=50)country = models.CharField(max_length=50)#gender = models.CharField(max_length=50)creat_time = models.DateTimeField(auto_now_add=True)update_time = models.DateTimeField(auto_now=True)def__str__(self):return self.openidmy_ser.pyfrom rest_framework import serializersfrom app01 import modelsclass wx_user_ser(serializers.ModelSerializer):class Meta:model = models.Wxuserfields = "__all__"⼩程序⽀付流程1 ⽤户发起请求下单⽀付2 我们要保证⽤是登⼊状态。
