上午研究了一下gihub第三方登录,分享给大家
1. github上面
,
2.代码
const Mongo = require('../model');
const Crypto = require('../lib/crypto');
const redis = global.redisDb;
const https = require('https');
const Promise = require('bluebird');
const qs = require('querystring');
const _ = require('lodash');
const request = require('request');
Promise.promisifyAll(request);
/**
* github 登录
*/
exports.github = async(ctx) => {
try {
const cfg_github = global.config.github;
let state = Crypto.UUID();
ctx.session.state = state;
let path = "https://github.com/login/oauth/authorize?" + qs.stringify({
client_id: cfg_github.client_id,
state: state,
redirect_uri: cfg_github.redirect_url
});
//转发到授权服务器
ctx.redirect(path);
} catch (e) {
ctx.status = 400;
return ctx.body = e.message
}
};
/**
* github 登录回调
*/
exports.githubCb = async(ctx) => {
try {
const cfg_github = global.config.github;
let query = ctx.query, session = ctx.session;
let {code, state} = query;
if (state != session.state) {
throw new Error('请稍后继续');
}
let params = {
client_id: cfg_github.client_id,
client_secret: cfg_github.client_secret,
code: code
};
//获取 access_token
let reqTk = await request.postAsync('https://github.com/login/oauth/access_token', {json: params});
//判断request请求是否正确返回
if(!/^(2)/.test(reqTk.statusCode)){
throw new Error(reqTk.body);
}
let access_token = reqTk.body.access_token;
//获取github user 信息
let reqUser = await request.getAsync({
headers: {'Authorization': 'token ' + access_token, 'User-Agent': 'request'},
url: 'https://api.github.com/user'
});
//判断request请求是否正确返回
if(!/^(2)/.test(reqUser.statusCode)){
throw new Error(reqUser.body);
}
//检查是否登录,登录绑定,没登录则注册或登录
let gitBody = JSON.parse(reqUser.body);
let gitHub_id = gitBody.id;
if (!session.user) { //没有登录
let user = await Mongo.User.findOne({gitHub_id: gitHub_id});
if (user) {
session.user = _.pick(user,['_id']);
ctx.body = user
} else {
let entity = {
name: gitBody.name,
avatar_url: gitBody.avatar_url,
email: gitBody.email,
gitHub_id: gitBody.id,
location: gitBody.location
};
let createUser = await Mongo.User.create(entity);
session.user = _.omit(createUser,['_id']);
ctx.body = createUser;
}
} else { //已登录
let user = await Mongo.User.findOne({gitHub_id: gitHub_id});
if(user){
throw new Error('该账号已经被绑定');
}else {
let updateUser = await Mongo.User.update({_id: session.user._id}, {gitHub_id: gitHub_id});
ctx.body = updateUser;
}
}
} catch (e) {
ctx.status = 400;
return ctx.body = e.message
}
};