釘釘的的官方開發文檔中只給出了java實現三方登錄的，我們準備用go語言來實現

實現網頁方式登錄應用（登錄第三方網站） - 釘釘開放平臺

首先就是按照文檔進行操作，備注好網站的信息

獲得應用憑證，我們后面會用到

之后配置回調域名，用于后續前端頁面重定向使用

開通用戶的個人信息權限

代碼如下

控制層

// RedirectToDingTalkLogin
// @Description: 將用戶重定向到釘釘登錄授權頁
// @param        c *gin.Context
func RedirectToDingTalkLogin(c *gin.Context) {appId := "**這里寫你的Client ID**"redirectUri := url.QueryEscape("**這里寫你的回調地址**") // 釘釘回調地址state := "random-state"                                             //防止CSRF，可選url := fmt.Sprintf("https://oapi.dingtalk.com/connect/qrconnect?appid=%s&response_type=code&scope=snsapi_login&state=%s&redirect_uri=%s",appId, state, redirectUri)c.Redirect(http.StatusFound, url)
}// GetDingTalkToken
// @Description: 處理釘釘回調信息
// @param        c *gin.Context
func GetDingTalkToken(c *gin.Context) {authCode := c.DefaultQuery("authCode", "")if authCode == "" {response.Failed(c, http.StatusBadRequest, response.NewAppErr(globals.StatusBadRequest, nil, nil))return}accessToken, err := logics.GetAccessToken(authCode)if err != nil {response.Failed(c, http.StatusInternalServerError, response.NewAppErr(globals.StatusInternalServerError, err, nil))return}//獲取用戶信息userInfo, err := logics.GetDingTalkUserInfo(accessToken)if err != nil {response.Failed(c, http.StatusInternalServerError, response.NewAppErr(globals.StatusInternalServerError, err, nil))return}logics.ThirdPartLogin(c, userInfo, "dingTalk")
}

業務層代碼

var dingTalkConf = requests.Conf{ClientId:     "你的client ID",ClientSecret: "你的ClientSecret",RedirectUrl:  "你的回調地址",
}// GetAccessToken
// @Description: 獲取釘釘通行token
// @param        authCode string
// @return       string
// @return       error
func GetAccessToken(authCode string) (string, error) {api := "https://api.dingtalk.com/v1.0/oauth2/userAccessToken"payload := url.Values{}payload.Set("clientId", dingTalkConf.ClientId)payload.Set("clientSecret", dingTalkConf.ClientSecret)payload.Set("code", authCode)payload.Set("grantType", "authorization_code")resp, err := http.PostForm(api, payload)if err != nil {return "", fmt.Errorf("post token error: %v", err)}defer resp.Body.Close()body, _ := ioutil.ReadAll(resp.Body)if resp.StatusCode != http.StatusOK {return "", fmt.Errorf("failed to get token: %s", string(body))}var tokenResp requests.TokenResponseif err = json.Unmarshal(body, &tokenResp); err != nil {return "", fmt.Errorf("parse token json error: %v", err)}return tokenResp.AccessToken, nil
}// GetDingTalkUserInfo
// @Description: 通過token獲取用戶信息
// @param        accessToken string
// @return       *models.User
// @return       error
func GetDingTalkUserInfo(accessToken string) (map[string]interface{}, error) {api := "https://api.dingtalk.com/v1.0/contact/users/me"req, _ := http.NewRequest("GET", api, nil)req.Header.Set("x-acs-dingtalk-access-token", accessToken)client := &http.Client{}resp, err := client.Do(req)if err != nil {return nil, fmt.Errorf("get user info error: %v", err)}defer resp.Body.Close()body, _ := ioutil.ReadAll(resp.Body)if resp.StatusCode != http.StatusOK {return nil, fmt.Errorf("failed to get user info: %s", string(body))}var userInfo map[string]interface{}if err = json.Unmarshal(body, &userInfo); err != nil {return nil, fmt.Errorf("parse user json error: %v", err)}return userInfo, nil
}// ThirdPartLogin
// @Description: 根據第三方信息登錄并生成token
// @param        c *gin.Context
// @param        userInfo map[string]interface{}
// @param        provider string
func ThirdPartLogin(c *gin.Context, userInfo map[string]interface{}, provider string) {db := globals.DB//判斷用戶是否掃碼登錄過userId, err := repositories.CheckHistoryLogin(db, userInfo["id"].(string), provider)if err != nil {response.Failed(c, http.StatusInternalServerError, response.NewAppErr(globals.StatusInternalServerError, err, nil))}if userId == 0 {//判斷用戶是否注冊過user := repositories.QueryUserByEmail(db, userInfo["email"].(string))if user == nil {//沒注冊過直接跳轉至注冊return}//將三方登錄記錄插入記錄表err = repositories.InsertOtherLogin(db, userInfo["id"].(string), provider, user.ID)if err != nil {response.Failed(c, http.StatusInternalServerError, response.NewAppErr(globals.StatusInternalServerError, err, nil))return}}// 生成tokenid := userIdtok, err := token.GenerateToken(id, userInfo["email"].(string))if err != nil {globals.Log.Errorf(err.Error())response.Failed(c, http.StatusInternalServerError, response.NewAppErr(globals.StatusInternalServerError, err, nil))return}response.Success(c, http.StatusOK, response.NewAppData(globals.StatusOK, response.DataSuccess, gin.H{"Token": tok, "userinfo": userInfo}))
}