ASP.NET实现QQ、微信、新浪微博OAuth2.0授权登录
不管是腾讯还是新浪，查看他们的API，PHP都是有完整的接口，但对C#支持似乎都不是那么完善，都没有，腾讯是完全没有，新浪是提供第三方的，而且后期还不一定升级，NND，用第三方的动辄就一个类库，各种配置还必须按照他们约定的写，烦而且乱，索性自己写，后期的扩展也容易，看过接口后，开始以为很难，参考了几个源码之后发现也不是那么难，无非是GET或POST请求他们的接口获取返回值之类的，话不多说，这里只提供几个代码共参考，抛砖引玉了。。。
我这个写法的特点是，用到了Session，使用对象实例化之后调用 Login() 跳转到登录页面，在回调页面调用Callback() 执行之后，可以从Session也可以写独立的函数（如：GetOpenID()）中获取access_token或用户的唯一标识，以方便做下一步的操作。所谓绑定就是把用户的唯一标识取出，插入数据库，和帐号绑定起来。
1.首先是所有OAuth类的基类，放一些需要公用的方法
public abstract class BaseOAuth
{
public HttpRequest Request = HttpContext.Current.Request;
public HttpResponse Response = HttpContext.Current.Response;
public HttpSessionState Session = HttpContext.Current.Session;
public abstract void Login();
public abstract string Callback();
#region 内部使用函数
///
/// 生成唯一随机串防CSRF攻击
///
///
/// GET请求
///
///
///
/// POST请求
///
///
///
///
/// 解析JSON
///
///
///
/// 解析URL
///
///
/// 2.QQ的OAuth类
public class QQOAuth : BaseOAuth
{
public string AppId = ConfigurationManager.AppSettings["OAuth_QQ_AppId"];
public string AppKey = ConfigurationManager.AppSettings["OAuth_QQ_AppKey"];
public string RedirectUrl = ConfigurationManager.AppSettings["OAuth_QQ_RedirectUrl"];
public const string GET_AUTH_CODE_URL = "https://graph.qq.com/oauth2.0/authorize";
public const string GET_ACCESS_TOKEN_URL = "https://graph.qq.com/oauth2.0/token";
public const string GET_OPENID_URL = "https://graph.qq.com/oauth2.0/me";
///
/// QQ登录，跳转到登录页面
///
public override void Login()
{
//-------生成唯一随机串防CSRF攻击
string state = GetStateCode();
Session["QC_State"] = state; //state 放入Session
string parms = "?response_type=code&"
+ "client_id=" + AppId + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl) + "&state=" + state;
string url = GET_AUTH_CODE_URL + parms;
Response.Redirect(url); //跳转到登录页面
}
///
/// QQ回调函数
///
///
///
///
/// 使用Access Token来获取用户的OpenID
///
///
///
/// 显示错误信息
///
/// 错误编号
/// 错误描述
private void ShowError(string code, string description = null)
{
if (description == null)
{
switch (code)
{
case "20001":
description = "配置文件损坏或无法读取，请检查web.config
";
break;
case "30001":
description = "The state does not match. You may be a victim of CSRF.
";
break;
case "50001":
description = "可能是服务器无法请求https协议
可能未开启curl支持,请尝试开启curl支持，重启web服务器，如果问题仍未解决，请联系我们";
break;
default:
description = "系统未知错误，请联系我们
";
break;
}
Response.Write(description);
Response.End();
}
else
{
Response.Write("error:" + code + "msg:" + description);
Response.End();
}
}
}
3.新浪微博的OAuth类
public class SinaOAuth : BaseOAuth
{
public string AppKey = ConfigurationManager.AppSettings["OAuth_Sina_AppKey"];
public string AppSecret = ConfigurationManager.AppSettings["OAuth_Sina_AppSecret"];
public string RedirectUrl = ConfigurationManager.AppSettings["OAuth_Sina_RedirectUrl"];
public const string GET_AUTH_CODE_URL = "https://api.weibo.com/oauth2/authorize";
public const string GET_ACCESS_TOKEN_URL = "https://api.weibo.com/oauth2/access_token";
public const string GET_UID_URL = "https://api.weibo.com/2/account/get_uid.json";
///
/// 新浪微博登录，跳转到登录页面
///
public override void Login()
{
//-------生成唯一随机串防CSRF攻击
string state = GetStateCode();
Session["Sina_State"] = state; //state 放入Session
string parms = "?client_id=" + AppKey + "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl)
+ "&state=" + state;
string url = GET_AUTH_CODE_URL + parms;
Response.Redirect(url); //跳转到登录页面
}
///
/// 新浪微博回调函数
///
///
/// 显示错误信息
///
/// 错误描述
private void ShowError(string description = null)
{
Response.Write("" + description + "
");
Response.End();
}
}4.微信的OAuth类
public class WeixinOAuth : BaseOAuth
{
public string AppId = ConfigurationManager.AppSettings["OAuth_Weixin_AppId"];
public string AppSecret = ConfigurationManager.AppSettings["OAuth_Weixin_AppSecret"];
public string RedirectUrl = ConfigurationManager.AppSettings["OAuth_Weixin_RedirectUrl"];
public const string GET_AUTH_CODE_URL = "https://open.weixin.qq.com/connect/qrconnect";
public const string GET_ACCESS_TOKEN_URL = "https://api.weixin.qq.com/sns/oauth2/access_token";
public const string GET_USERINFO_URL = "https://api.weixin.qq.com/sns/userinfo";
///
/// 微信登录，跳转到登录页面
///
public override void Login()
{
//-------生成唯一随机串防CSRF攻击
string state = GetStateCode();
Session["Weixin_State"] = state; //state 放入Session
string parms = "?appid=" + AppId
+ "&redirect_uri=" + Uri.EscapeDataString(RedirectUrl) + "&response_type=code&scope=snsapi_login"
+ "&state=" + state + "#wechat_redirect";
string url = GET_AUTH_CODE_URL + parms;
Response.Redirect(url); //跳转到登录页面
}
///
/// 微信回调函数
///
///
///
///
/// 显示错误信息
///
/// 错误编号
/// 错误描述
private void ShowError(string code, string description = null)
{
if (description == null)
{
switch (code)
{
case "20001":
description = "配置文件损坏或无法读取，请检查web.config
";
break;
case "30001":
description = "The state does not match. You may be a victim of CSRF.
";
break;
case "50001":
description = "接口未授权
";
break;
default:
description = "系统未知错误，请联系我们
";
break;
}
Response.Write(description);
Response.End();
}
else
{
Response.Write("error:" + code + "msg:" + description);
Response.End();
}
}
}
5.web.config配置信息
原文地址： ASP.NET实现QQ、微信、新浪微博OAuth2.0授权登录