Java实现微信扫码授权登录完整步骤

        <dependency>
            <groupId>com.github.binarywang</groupId>
            <artifactId>weixin-java-mp</artifactId>
            <version>4.7.6-20250704.154059</version>
        </dependency>

wx.mp.appId=wx805bf0797a5f2911 # 必填
wx.mp.secret=72256cbeffd04ba3d592e133fe8f1f7a #必填 
wx.mp.token=xwhking

package com.xwhking.wxlogin.config;
import me.chanjar.weixin.mp.api.WxMpMessageRouter;
import me.chanjar.weixin.mp.api.WxMpService;
import me.chanjar.weixin.mp.api.impl.WxMpServiceImpl;
import me.chanjar.weixin.mp.config.impl.WxMpDefaultConfigImpl;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class WxConfig {
    @Value("${wx.mp.appId}")
    private String appId;

    @Value("${wx.mp.secret}")
    private String secret;

    @Value("${wx.mp.token}")
    private String token;


    @Bean
    public WxMpService wxMpService() {
        WxMpDefaultConfigImpl config = new WxMpDefaultConfigImpl();
        config.setAppId(appId);
        config.setSecret(secret);
        config.setToken(token);

        WxMpService service = new WxMpServiceImpl();
        service.setWxMpConfigStorage(config);
        return service;
    }

    @Bean
    public WxMpMessageRouter messageRouter(WxMpService wxMpService) {
        final WxMpMessageRouter router = new WxMpMessageRouter(wxMpService);
        // 这里可以添加各种消息处理器
        return router;
    }
}

@RestController
@RequestMapping("/wx/callback")
public class WxController {
    @Autowired
    private WxMpService wxMpService;
    @GetMapping
    public String verify(String signature, String timestamp, String nonce, String echostr) throws WxErrorException {
        boolean b = wxMpService.checkSignature(timestamp, nonce, signature); //是否满足微信的校验条件
        if(b) {
            return echostr;
        }
        return null;
    }
}

WxOAuth2UserInfo(openid=owO-dvkozjjzycXgtaCCgFbzxxxx, nickname=DIOIT, sex=0, city=, province=, country=, headImgUrl=https://thirdwx.qlogo.cn/mmopen/vi_32/GcAobrQM3uzlReTKGs7KtuPUibUrYXzt3hluJCXHr7DCMibYoB2viabQ2PsVPq8BfbsDwIozz1vpdAx4oib4gnTCdQ/132, unionId=null, privileges=[])

package com.xwhking.wxlogin.controller;

import me.chanjar.weixin.common.api.WxConsts;
import me.chanjar.weixin.common.bean.WxOAuth2UserInfo;
import me.chanjar.weixin.common.bean.oauth2.WxOAuth2AccessToken;
import me.chanjar.weixin.common.error.WxErrorException;
import me.chanjar.weixin.common.util.crypto.SHA1;
import me.chanjar.weixin.mp.api.WxMpMessageRouter;
import me.chanjar.weixin.mp.api.WxMpService;
import me.chanjar.weixin.mp.bean.message.WxMpXmlMessage;
import me.chanjar.weixin.mp.bean.message.WxMpXmlOutMessage;
import me.chanjar.weixin.mp.bean.result.WxMpUser;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.*;

@RestController
@RequestMapping("/wx/callback")
public class WxController {
    @Autowired
    private WxMpService wxMpService;
    @Autowired
    private WxMpMessageRouter wxMpMessageRouter;
    @GetMapping
    public String verify(String signature, String timestamp, String nonce, String echostr) throws WxErrorException {
        boolean b = wxMpService.checkSignature(timestamp, nonce, signature); //是否满足微信的校验条件
        if(b) {
            return echostr;
        }
        return null;
    }
    @PostMapping(produces = "application/xml; charset=UTF-8")
    public String post(
            @RequestBody String requestBody,
            @RequestParam("signature") String signature,
            @RequestParam("timestamp") String timestamp,
            @RequestParam("nonce") String nonce,
            @RequestParam(name = "encrypt_type", required = false) String encType,
            @RequestParam(name = "msg_signature", required = false) String msgSignature) throws WxErrorException {

        if (!wxMpService.checkSignature(timestamp, nonce, signature)) {
            throw new IllegalArgumentException("非法请求");
        }

        // 处理消息
        WxMpXmlMessage inMessage = WxMpXmlMessage.fromXml(requestBody);

        System.out.println("inMessage"+inMessage);
        // 如果是二维码扫描事件
        if (inMessage.getEvent().equals(WxConsts.EventType.SCAN) ||
                inMessage.getEvent().equals(WxConsts.EventType.SUBSCRIBE)) {

            String redirectUri = "https://519e7b4c.r9.cpolar.cn/wx/callback/auth-callback"; // 你的回调地址
            String scope = "snsapi_userinfo"; // 需要获取用户信息
            String state = "random_state_123"; // 防CSRF攻击

            // 构造授权URL
            String authUrl = wxMpService.getOAuth2Service().buildAuthorizationUrl(redirectUri, scope, state);

            // 可以回复消息
            String APPID = wxMpService.getWxMpConfigStorage().getAppId();
            String SECRET = wxMpService.getWxMpConfigStorage().getSecret();
            String accessToken = wxMpService.getAccessToken();
            WxMpUser wxMpUser = wxMpService.getUserService().userInfo(inMessage.getFromUser());
            System.out.println(wxMpUser);
            WxMpXmlOutMessage outMessage = WxMpXmlOutMessage.TEXT()
                    .content("<a href=\'"+authUrl+"\'>登录</a>")
                    .fromUser(inMessage.getToUser())
                    .toUser(inMessage.getFromUser())
                    .build();
            return outMessage.toXml();
        }

        // 其他消息交给路由器处理
        WxMpXmlOutMessage outMessage = wxMpMessageRouter.route(inMessage);
        if (outMessage != null) {
            return outMessage.toXml();
        }

        return "";
    }
    @GetMapping("/auth-callback")
    public String callback(
            @RequestParam("code") String code,
            @RequestParam(value = "state", required = false) String state) {

        // 验证state防止CSRF攻击


        try {
            // 1. 用code换取access_token
            WxOAuth2AccessToken accessToken = wxMpService.getOAuth2Service().getAccessToken(code);
            // 2. 获取用户信息
            WxOAuth2UserInfo userInfo = wxMpService.getOAuth2Service().getUserInfo(accessToken, null);
            System.out.println(userInfo);
            return "success";
        } catch (WxErrorException e) {
            return "授权失败: " + e.getMessage();
        }
    }
}