坛里有朋友搞过阿里巴巴API的授权请求吗-PHP Tutorial-php.cn

Home

Backend Development

PHP Tutorial

坛里有朋友搞过阿里巴巴API的授权请求吗

WBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWBOYWB

Jun 23, 2016 pm 02:26 PM

Rt.

http://open.china.alibaba.com/doc/api/cn/sys_auth.htm?ns=cn.alibaba.open

就这这一步，

------------------------------------

....

2) app发起授权请求

http://gw.open.china.alibaba.com/auth/authorize.htm?client_id=xxx&site=cbu&redirect_uri=YOUR_REDIRECT_URL&state=YOUR_PARM&_aop_signature=SIGENATURE

....

-------------------------------------

都搞不通，一直跳到错误页面。真是崩溃。

回复讨论(解决方案)

这个还真没搞过。那位高人指点下，坐等。

OAuth 2.0规范
应该和新浪API差别不大，这不需要专门申请key吗
你的SIGENATURE怎么没值啊
后台接口getToken，你接收到令牌了没
YOUR_REDIRECT_URL这个是回调地址，文档上都有说明吧

有申请到key的。
他是先发起授权请求获得code一个字符串，然后再去getToken获取令牌的。

后面的流程没问题可以测试通过。

现在问题是怎么发起授权请求的问题，按照他们文档那样做老是跳到错误页面。

web服务端和客户端流程大都一致，可参考客户端流程。唯一不同点在于步骤[2]app发起授权申请的url中，redirect_url应为app的一个url地址，授权临时令牌会以queryString的形式跟在该url后返回。

楼上复制文档.......... = =

我把密钥都贴出来了。

AppKey: 1002774
AppSecret : PwPao1M4fUH

php签名方法
$code_sign = strtoupper(bin2hex(hash_hmac("sha1", $str, $appSecret, true)));

实在搞不鸟。。。请求各位帮忙。

有申请到key的。
他是先发起授权请求获得code一个字符串，然后再去getToken获取令牌的。

后面的流程没问题可以测试通过。

现在问题是怎么发起授权请求的问题，按照他们文档那样做老是跳到错误页面。
什么样的错误页面，是公用的像404一样吗，令牌有效期10个小时，别过期了，如果你完全按要求来，还有问题联系他们客服人员，在这之前，最好先确定，错误提示类型，令牌过期了没，引用方法、地址是否正确，参数再申核一遍，官方文档是至高无尚的

错误页面提示
很抱歉，您查找的页面不存在，可能已被删除或转移

有联系他们的。
他们都不确定文档是否正确的，旺旺找他们，他们说联系email，email联系上回复说"...不太懂技术.."。

现在不是令牌问题啊。
第一步发起授权请求都有问题了，这个是授权后取得一个code的。
code取不到，令牌什么的都就不能取的...后面流程什么都操作不了。

卡卡阿里爸爸这么搞？这个我不清楚如果是taobao open 我就很熟悉了... open上问问题也很容易解决. 继续悲剧吧...

阿门, 只玩过百度的Oauth2.0，母鸡了。

卡卡阿里爸爸这么搞？这个我不清楚如果是taobao open 我就很熟悉了... open上问问题也很容易解决. 继续悲剧吧...

之前也搞过taobao open 啊。就没这这个这么麻烦，同样也是通过url就可以发起授权请求了。
淘宝的开放平台就好些，用的人多。有问题容易解决啊。

阿门, 只玩过百度的Oauth2.0，母鸡了。

哈，正在做这个，也遇到这样的问题了，求解中。。。

楼主调试阿里巴巴API成功没？我现在连一个api调试都没调成功？楼主给个实例罗！

code不需要在程序中获取它应该是应用市场访问你APP的入口的时候会带一个CODE参数你获取后只需要使用getToken接口拿应用市场传过来的code换取accessToken

Statement

The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn

How can you check if a PHP session has already started?Apr 30, 2025 am 12:20 AM

In PHP, you can use session_status() or session_id() to check whether the session has started. 1) Use the session_status() function. If PHP_SESSION_ACTIVE is returned, the session has been started. 2) Use the session_id() function, if a non-empty string is returned, the session has been started. Both methods can effectively check the session state, and choosing which method to use depends on the PHP version and personal preferences.

Describe a scenario where using sessions is essential in a web application.Apr 30, 2025 am 12:16 AM

Sessionsarevitalinwebapplications,especiallyfore-commerceplatforms.Theymaintainuserdataacrossrequests,crucialforshoppingcarts,authentication,andpersonalization.InFlask,sessionscanbeimplementedusingsimplecodetomanageuserloginsanddatapersistence.

How can you manage concurrent session access in PHP?Apr 30, 2025 am 12:11 AM

Managing concurrent session access in PHP can be done by the following methods: 1. Use the database to store session data, 2. Use Redis or Memcached, 3. Implement a session locking strategy. These methods help ensure data consistency and improve concurrency performance.

What are the limitations of using PHP sessions?Apr 30, 2025 am 12:04 AM

PHPsessionshaveseverallimitations:1)Storageconstraintscanleadtoperformanceissues;2)Securityvulnerabilitieslikesessionfixationattacksexist;3)Scalabilityischallengingduetoserver-specificstorage;4)Sessionexpirationmanagementcanbeproblematic;5)Datapersis

Explain how load balancing affects session management and how to address it.Apr 29, 2025 am 12:42 AM

Load balancing affects session management, but can be resolved with session replication, session stickiness, and centralized session storage. 1. Session Replication Copy session data between servers. 2. Session stickiness directs user requests to the same server. 3. Centralized session storage uses independent servers such as Redis to store session data to ensure data sharing.

Explain the concept of session locking.Apr 29, 2025 am 12:39 AM

Sessionlockingisatechniqueusedtoensureauser'ssessionremainsexclusivetooneuseratatime.Itiscrucialforpreventingdatacorruptionandsecuritybreachesinmulti-userapplications.Sessionlockingisimplementedusingserver-sidelockingmechanisms,suchasReentrantLockinJ

Are there any alternatives to PHP sessions?Apr 29, 2025 am 12:36 AM

Alternatives to PHP sessions include Cookies, Token-based Authentication, Database-based Sessions, and Redis/Memcached. 1.Cookies manage sessions by storing data on the client, which is simple but low in security. 2.Token-based Authentication uses tokens to verify users, which is highly secure but requires additional logic. 3.Database-basedSessions stores data in the database, which has good scalability but may affect performance. 4. Redis/Memcached uses distributed cache to improve performance and scalability, but requires additional matching

Define the term 'session hijacking' in the context of PHP.Apr 29, 2025 am 12:33 AM

Sessionhijacking refers to an attacker impersonating a user by obtaining the user's sessionID. Prevention methods include: 1) encrypting communication using HTTPS; 2) verifying the source of the sessionID; 3) using a secure sessionID generation algorithm; 4) regularly updating the sessionID.

See all articles