PHP和OAuth：快速入门指南

$ pecl install oauth

<?php
$client_id = "YOUR_CLIENT_ID";
$client_secret = "YOUR_CLIENT_SECRET";
$redirect_uri = "http://example.com/callback";

$auth_url = "https://oauth.example.com/authorize";
$token_url = "https://oauth.example.com/token";

// 第一步：重定向用户到授权页面
$url = "$auth_url?client_id=$client_id&redirect_uri=$redirect_uri&response_type=code";
header("Location: $url");
exit;

// 第二步：授权服务器重定向用户到回调URL，并返回授权码
$code = $_GET['code'];

// 第三步：通过授权码和客户端密钥获取访问令牌
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $token_url);
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query([
    'code' => $code,
    'client_id' => $client_id,
    'client_secret' => $client_secret,
    'redirect_uri' => $redirect_uri,
    'grant_type' => 'authorization_code',
]));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response = curl_exec($ch);
curl_close($ch);

// 解析access_token和refresh_token
$data = json_decode($response, true);
$access_token = $data['access_token'];
$refresh_token = $data['refresh_token'];

// 第四步：使用访问令牌访问资源
$api_url = "https://api.example.com/user-info";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $api_url);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "Authorization: Bearer $access_token"
]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response = curl_exec($ch);
curl_close($ch);

// 处理API响应
$data = json_decode($response, true);
// 处理用户数据
?>