分类导航

PHP 发布时间：2019-11-12 发布网站：大佬教程 code.js-code.com

大佬教程收集整理的这篇文章主要介绍了php实现paypal 授权登录，大佬教程大佬觉得挺不错的，现在分享给大家，也给大家做个参考。

php实现paypal 授权登录

php;"> php

@project paypal login
@author jiangjianhe
@date 2015-04-03@H_618_10@ */

class paypallogin@H_618_10@ {

//沙箱token链接@H_618_10@ private $_sanbox_oauth2_auth_uri = 'https://www.sandbox.paypal.com/webapps/auth/protocol/openidconnect/v1/authorize';@H_618_10@ private $_live_oauth2_auth_uri = 'https://www.paypal.com/webapps/auth/protocol/openidconnect/v1/authorize';

private $_acquire_user_profile_sandbox_url = 'https://www.sandbox.paypal.com/webapps/auth/protocol/openidconnect/v1/userinfo?schema=openid&access_token=';@H_618_10@ private $_acquire_user_profile_live_url = 'https://www.paypal.com/webapps/auth/protocol/openidconnect/v1/userinfo?schema=openid&access_token=';

//沙箱token链接@H_618_10@ private $_token_service_sandbox_url = 'https://www.sandbox.paypal.com/webapps/auth/protocol/openidconnect/v1/tokenservice';@H_618_10@ private $_token_service_live_url = 'https://www.paypal.com/webapps/auth/protocol/openidconnect/v1/tokenservice';@H_618_10@ private $_sanbox_flag = true;@H_618_10@ private $_client_id = null;@H_618_10@ private $_client_secret = null;@H_618_10@ private $_redirect_uri = null;@H_618_10@ private $_state = '';@H_618_10@ private $_scope = 'openid email phone profile address https://uri.paypal.com/services/paypalattributes'; //scope 参数决定访问令牌的访问权限各个参数详解url;:https://www.paypal-biz.com/product/login-with-paypal/index.html#configureButton

public $token = null;@H_618_10@ public $protocol = "http";

/**

@name 构造函数
@param $flag 是否沙箱环境@H_618_10@ */@H_618_10@ public function __construct($redirect_uri,$client_id,$client_secret,$scope,$state,$flag = truE)@H_618_10@ {@H_618_10@ $this->_sanbox_flag = $flag;@H_618_10@ $this->_redirect_uri = $redirect_uri;@H_618_10@ $this->_client_id = $client_id;@H_618_10@ $this->_client_secret = $client_secret;@H_618_10@ $this->_scope = $scope;@H_618_10@ $this->_state = $state;@H_618_10@ }

/**

创建paypal request url
@return String@H_618_10@ */@H_618_10@ public function create_request_url()@H_618_10@ {@H_618_10@ $oauth2_auth_uri = $this->_sanbox_flag ? $this->_sanbox_oauth2_auth_uri :$this->_live_oauth2_auth_uri;@H_618_10@ $url = $oauth2_auth_uri.'?'.@H_618_10@ http_build_query(@H_618_10@ array(@H_618_10@ 'client_id' => $this->_client_id,//通过应用程序注册流程获得的唯一客户端标识符。必需。@H_618_10@ 'response_type' =>'code',//表明授权代码被发送回应用程序返回URL。为了使访问令牌在用户代理中不可见，建议使用code一值。如果您希望在响应中同时收到授权代码和 id_token ，请传递 code+id_token。另一个可能的 response_type 值是 token ——大部分由javascript和移动客户端等公共客户端使用。@H_618_10@ 'scope' => $this->_scope,//;implode(',',$this->scopE),'redirect_uri' => urlencode($this->_redirect_uri),//应用程序的返回URL。结构、主机名和端口必须与您在注册应用程序时设置的返回URL相符。@H_618_10@ 'nonce' => time().rand(),//不透明的随机标识符，可减少重放攻击风险。简单的函数是：(timestamp + Base64 encoding (random[16]))。@H_618_10@ 'state' => $this->_state,// CSRF验证码@H_618_10@ )@H_618_10@ );@H_618_10@ return $url;@H_618_10@ }

/**

get PayPal access token
@param String $code ?
@return String access token@H_618_10@ */@H_618_10@ public function acquire_access_token($code ) {@H_618_10@ $accessToken = null;

try {
  $postvals = sprintf("client_id=%s&client_secret=%s&grant_type=authorization_code&code=%s",$this->_client_id,$this->_client_secret,$codE);
  if($this->_sanbox_flag)
    $ch = curl_init($this->_token_service_sandbox_url);
  else
    $ch = curl_init($this->_token_service_live_url); 

  $options = array(
    CURLOPT_POST      => 1,CURLOPT_VERBOSE    => 1,CURLOPT_POSTFIELDS   => $postvals,CURLOPT_RETURNTRANSFER => 1,CURLOPT_SSL_VERIFYPEER => falSE,//CURLOPT_SSLVERSION => 2
  );

  curl_setopt_array($ch,$options);
  $response = curl_exec($ch);
  $error = curl_error($ch);

  curl_close( $ch );

  if (!$response ) {
    throw new Exception( "Error retrieving access token: " . curl_error($ch));
  }
  $jsonResponse = json_decode($response );

  if ( isset( $jsonResponse->access_token) ) {
    $accessToken = $jsonResponse->access_token;
  }

} catch( Exception $E) {
  throw new Exception($e->getmessage(),1);
}

return $accessToken;

}

/**

get the PayPal user profile,decoded
@param String $accessToken
@return object@H_618_10@ */@H_618_10@ public function acquire_paypal_user_profile($accessToken ) {@H_618_10@ try {@H_618_10@ if($this->_sanbox_flag)@H_618_10@ $url = $this->_acquire_user_profile_sandbox_url . $accessToken;@H_618_10@ else@H_618_10@ $url = $this->_acquire_user_profile_live_url . $accessToken;

$ch = curl_init( $url );@H_618_10@ $options = array(@H_618_10@ CURLOPT_RETURNTRANSFER => 1,//CURLOPT_SSLVERSION => 2@H_618_10@ );@H_618_10@ curl_setopt_array($ch,$options);

$response = curl_exec($ch);@H_618_10@ $error = curl_error( $ch);@H_618_10@ curl_close( $ch );

if (!$response )@H_618_10@ {@H_618_10@ return false;@H_618_10@ }@H_618_10@ return json_decode($responsE);@H_618_10@ } catch( Exception $e ) {@H_618_10@ return false;@H_618_10@ }@H_618_10@ }@H_618_10@ }@H_618_10@ ?>