钉钉扫码登录第三方网站

dingding_scan_login.rb

# 用于rails的代码片段，省略了各种引入第三方库的代码

class Dingding
  def self.get_user_info_by_code code
    timestamp = (Time.now.to_f * 1000).to_i
    sign = hmac_sign(APP_SECRET, timestamp)
    url = "https://oapi.dingtalk.com/sns/getuserinfo_bycode?accessKey=APPID}&timestamp=#{timestamp}&signature=#{sign}"

    RestClient.post(url, { tmp_auth_code: code }.to_json, { 'Content-Type' => 'application/json' }) do |response|
      return JSON.parse(response.body).symbolize_keys
    end
  end

  private
  # HMACSHA256 签名
  def self.hmac_sign(key, data)
    hmac = OpenSSL::HMAC.digest(OpenSSL::Digest.new('sha256'), key.to_s, data.to_s)
    sign = Base64.strict_encode64(hmac)
    puts sign.inspect
    CGI::escape(sign)
  end
end