PHP怎样处理OAuth1.0授权 OAuth1.0对接的5个步骤详解

function generate_oauth_signature($method, $url, $params, $consumer_secret, $token_secret) {
    // 1. 拼接参数字符串
    ksort($params); // 按照参数名进行排序
    $encoded_params = [];
    foreach ($params as $key => $value) {
        $encoded_params[] = rawurlencode($key) . '=' . rawurlencode($value);
    }
    $params_string = implode('&', $encoded_params);

    // 2. 拼接签名基字符串
    $base_string = strtoupper($method) . '&' . rawurlencode($url) . '&' . rawurlencode($params_string);

    // 3. 生成密钥
    $key = rawurlencode($consumer_secret) . '&' . rawurlencode($token_secret);

    // 4. 生成签名
    $signature = base64_encode(hash_hmac('sha1', $base_string, $key, true));

    return $signature;
}

// 示例
$method = 'POST';
$url = 'https://api.example.com/resource';
$params = [
    'oauth_consumer_key' => 'your_consumer_key',
    'oauth_nonce' => md5(uniqid(rand(), true)),
    'oauth_signature_method' => 'HMAC-SHA1',
    'oauth_timestamp' => time(),
    'oauth_version' => '1.0'
];
$consumer_secret = 'your_consumer_secret';
$token_secret = 'your_token_secret';

$signature = generate_oauth_signature($method, $url, $params, $consumer_secret, $token_secret);
$params['oauth_signature'] = $signature;

// 将参数添加到请求头或请求体中，发送请求

<?php
$consumer_key = 'your_consumer_key';
$consumer_secret = 'your_consumer_secret';
$request_token_url = 'https://api.example.com/oauth/request_token';
$authorize_url = 'https://api.example.com/oauth/authorize';
$access_token_url = 'https://api.example.com/oauth/access_token';

try {
    $oauth = new OAuth($consumer_key, $consumer_secret, OAUTH_SIG_METHOD_HMACSHA1, OAUTH_AUTH_TYPE_URI);
    $oauth->disableSSLChecks(); // 生产环境不要禁用

    // 1. 获取Request Token
    $request_token_info = $oauth->getRequestToken($request_token_url);
    $request_token = $request_token_info['oauth_token'];
    $request_token_secret = $request_token_info['oauth_token_secret'];

    // 2. 引导用户授权
    $authorize_url = $authorize_url . '?oauth_token=' . $request_token;
    header('Location: ' . $authorize_url);
    exit;

    // 3. 用户授权后，获取Access Token
    $oauth = new OAuth($consumer_key, $consumer_secret, OAUTH_SIG_METHOD_HMACSHA1, OAUTH_AUTH_TYPE_URI);
    $oauth->setToken($request_token, $request_token_secret);
    $access_token_info = $oauth->getAccessToken($access_token_url);
    $access_token = $access_token_info['oauth_token'];
    $access_token_secret = $access_token_info['oauth_token_secret'];

    // 4. 使用Access Token访问受保护资源
    $resource_url = 'https://api.example.com/resource';
    $oauth = new OAuth($consumer_key, $consumer_secret, OAUTH_SIG_METHOD_HMACSHA1, OAUTH_AUTH_TYPE_URI);
    $oauth->setToken($access_token, $access_token_secret);
    $oauth->fetch($resource_url);
    $response = $oauth->getLastResponse();

    echo $response;

} catch (OAuthException $e) {
    echo "OAuth Error: " . $e->getMessage();
}

$oauth_token = $_GET['oauth_token'];
$oauth_verifier = $_GET['oauth_verifier']; // 一些服务提供商会返回 verifier