課件33網(wǎng)頁(yè)開(kāi)發(fā)碼模式功能最流程嚴(yán)密的它特點(diǎn)就是通過(guò)客戶(hù)端后

資料https: 阮一峰的OAuth2http://w /blog/2014/05/oauth20.html碼模式（thztoncoe）是功能最完整、流程最嚴(yán)密的模式。它的特點(diǎn)就是通過(guò)客戶(hù)端的后臺(tái)服務(wù)器，與"服務(wù)提供商"的認(rèn)證服務(wù)器進(jìn)行互動(dòng)。假設(shè)用戶(hù)給予，認(rèn)證服務(wù)器將用戶(hù)導(dǎo)向客戶(hù)端事先指定的"重定向"diinI），附上一個(gè)碼?？蛻?hù)端收到碼，附上早先的"重定向URI"，向認(rèn)證服務(wù)器申請(qǐng)令牌。這一步是在客戶(hù)端的的服務(wù)器上完成的，對(duì)用戶(hù)不可見(jiàn)。認(rèn)證服務(wù)器核對(duì)了碼和重定向URI，確認(rèn)無(wú)誤后，向客戶(hù)端發(fā)送令牌（accesstoken）和更新令牌（refreshtoken）。-回調(diào)服務(wù)端獲取生成認(rèn)證接口AccessToken與1<cube-buttonv- <cube-buttonv-on:click="getUser">獲取用戶(hù)信息</cube-asyncauth(){window.location.href=////constOAuth=require('co-wechat-constoauth=newOAuth(conf.appid,//////生成引導(dǎo)用戶(hù)點(diǎn)擊的URL{conststate=//consttarget=ctx.hrefredirectUrl=redirectUrl=redirectUrl.re ce('wxAuthorize','wxCallback')constscope='snsapi_userinfo'console.log('url'+url)AccessToken與////獲取router.get('/wxCallback',async(ctx,next)constcodectx.query.code console.log('getAccessToken',varaccessToken=token.data.access_token;varopenid=token.data.openid; console.log('accessToken',accessToken)console.log('openid',openid)//ctx.body=ctx.redirect('/?openid='+//index.html//index.htmlconstopenid=qs.openidconstres=awaitaxios.get(`/getUser`,{params:{}////router.get('/getUser',async(ctx,next){constopenid=ctx.query.openidconsole.log('getUser',openid)console.log('userInfo:',userInfo)ctx.body=userInfo//// //const{}={useNewUrlParser:},()=>console.log('Mongodbexports.ServerToken={accessToken:schema=newSchema({access_token:String,expires_in:Number,openid:String,scope:String,create_at:String//自定義getTokenschema.statics.getToken=asyncfunction{returnawaitthis.findOne({openid:openidschema.statics.setToken=asyncfunction(openid,token)//constquery{openid:constoptions{upsert:returnreturnawaitthis.updateOne(query,token, Token= Token',constconstOAuth=require('co-wechat-asyncfunction(openid){return asyncfunction(openid,token)return Token.setToken(openid,}) /node-webot/co-wechat-api(獲取JSCon?g) 信語(yǔ)音、、上傳本地、拍照等許多能力 //////獲取JSConfigrouter.get('/getJsConfig'asyncctx{console.log('getJSSDK...',console.log('res',res)ctx.body=//<script//getJSConfig:asyncfunction{console.log('wx:',{params:urlurl:}console.log('res.......',res.data.jsApiList=['onwx.ready(functionShareTimeline