首页> 实战笔录 >PHP开发笔记 >Hyperf Hyperf

hyperf3.1实现google第三方网页授权登录

作者：小萝卜 2025-04-04 【 PHP Google Hyperf 第三方功能】浏览 97

简介总结步骤：1. 注册Google应用，获取客户端ID和密钥，配置回调URL。2. 安装OAuth2客户端和Google提供者库。3. 配置Hyperf的OAuth服务，注入GoogleProvider。4. 创建路由和控制器处理授权跳转和回调。5. 处理state参数，使用缓存存储。6. 在回调中换取访问令牌，获取用户信息。7. 处理用户登录或注册逻辑，返回应用自己的认证信息。

如果不知道怎么配置appid和key请移步：Google第三方网页授权登录-OAuth客户端创建配置流程

步骤1：安装依赖

composer require league/oauth2-client league/oauth2-google

步骤2：配置参数

在 config/autoload/oauth.php 中添加配置：

return [
    'google' => [
        'client_id' => env('GOOGLE_CLIENT_ID'),
        'client_secret' => env('GOOGLE_CLIENT_SECRET'),
        'redirect_uri' => env('GOOGLE_REDIRECT_URI'),
    ],
];

在 .env 文件中配置参数：

GOOGLE_CLIENT_ID=your-client-id
GOOGLE_CLIENT_SECRET=your-client-secret
GOOGLE_REDIRECT_URI=https://your-domain.com/auth/google/callback

步骤3：创建路由

在 config/routes.php 中添加（也可以直接在控制器使用注解路由）：

use Hyperf\HttpServer\Router\Router;

Router::get('/auth/google', 'App\Controller\AuthController@redirectToGoogle');
Router::get('/auth/google/callback', 'App\Controller\AuthController@handleGoogleCallback');

步骤4：创建控制器


declare(strict_types=1);

namespace App\Http\Api\Controller\V1;

use App\Http\Api\Controller\Common\BaseController;
use App\Http\Common\MineFormRequest;
use App\Repository\member\TMemberRepository;
use App\Service\crm\MemberThirdAuthService;
use Hyperf\Collection\Arr;
use Hyperf\Di\Annotation\Inject;
use Hyperf\HttpServer\Annotation\Controller;
use Hyperf\HttpServer\Annotation\GetMapping;
use Hyperf\HttpServer\Annotation\PostMapping;
use Hyperf\HttpServer\Contract\RequestInterface;
use Hyperf\HttpServer\Contract\ResponseInterface;
use Hyperf\Redis\Redis;
use League\OAuth2\Client\Provider\Google;

#[Controller(prefix: 'third/login')]
class MemberThirdAuthController extends BaseController
{
    #[Inject]
    public Redis $redis;

    #[Inject]
    public MemberThirdAuthService $service;

    /**
     * @param ResponseInterface $response
     * @return \Psr\Http\Message\ResponseInterface
     * @throws \Exception
     * @description  google跳转授权登录
     * @author: Luobo
     * @date: 2025/3/5 17:49
     */
    #[GetMapping(path: 'google')]
    public function googleLogin(ResponseInterface $response)
    {

        $provider = new Google([
            'clientId' => config('oauth.google.client_id'),
            'clientSecret' => config('oauth.google.client_secret'),
            'redirectUri' => config('oauth.google.redirect_uri'),
        ]);

        // 生成并保存state
        $state = bin2hex(random_bytes(16));
        $this->redis->set('oauth:google:state:' . $state, 'valid', 300);

        $authUrl = $provider->getAuthorizationUrl([
            'scope' => ['email', 'profile'],
            'state' => $state,
        ]);

        return $response->redirect($authUrl);
    }

    /**
     * @param RequestInterface $request
     * @throws \League\OAuth2\Client\Provider\Exception\IdentityProviderException
     * @description  google跳转授权回调地址
     * @author: Luobo
     * @date: 2025/3/5 17:49
     */
    #[GetMapping(path: 'google_callback')]
    public function googleCallback(MineFormRequest $request,ResponseInterface $response)
    {
        $state = $request->input('state');
        $code = $request->input('code');

        // 验证state
        if (!$this->redis->exists('oauth:google:state:' . $state)) {
            throw new \RuntimeException(crmTrans('Invalid state'));
        }

        $provider = new Google([
            'clientId' => config('oauth.google.client_id'),
            'clientSecret' => config('oauth.google.client_secret'),
            'redirectUri' => config('oauth.google.redirect_uri'),
        ]);

        // 获取访问令牌
        $token = $provider->getAccessToken('authorization_code', ['code' => $code]);

        // 获取用户信息
        $info = $provider->getResourceOwner($token)?->toArray();
        if(empty($info)){
            throw new \RuntimeException(crmTrans('Invalid user'));
        }

        $userInfo = [
            'sub'=>Arr::get($info,'sub',''),
            'email'=>Arr::get($info,'email',''),
            'name'=>Arr::get($info,'name',''),
            'picture'=>Arr::get($info,'picture',''),
            'plateform'=>'Google'
        ];
        $url = $this->service->setWebUser($userInfo,$request);

        return $response->redirect($url);

    }
}