使用Apple第三方登录Java版

由IOS端传过来code

服务端代码

import java.security.KeyFactory;

import java.security.PrivateKey;

import java.security.spec.PKCS8EncodedKeySpec;

import java.util.Base64;

import java.util.Collections;

import java.util.HashMap;

import java.util.List;

import java.util.Map;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.web.bind.annotation.GetMapping;

import org.springframework.web.bind.annotation.RequestMapping;

import org.springframework.web.bind.annotation.RestController;

import com.alibaba.fastjson.JSONObject;

import com.auth0.jwt.JWT;

import com.auth0.jwt.interfaces.DecodedJWT;

import io.jsonwebtoken.Jwts;

import io.jsonwebtoken.SignatureAlgorithm;

public class AppleLoginController {

/**

* 苹果授权登录

*

* @param code

* @param subject

* @return

* @throws Exception

*/

@GetMapping(“/authCode”)

public void authCode(String code) throws Exception {
String client_id = “com.**.**”; // 被授权的APP ID

Map<String, Object> header = new HashMap<String, Object>();

header.put(“kid”, “***”); // 参考后台配置

Map<String, Object> claims = new HashMap<String, Object>();

claims.put(“iss”, “***”); // 参考后台配置 team id

long now = System.currentTimeMillis() / 1000;

claims.put(“iat”, now);

claims.put(“exp”, now + 86400 * 30); // *长半年，单位秒

claims.put(“aud”, “https://appleid.apple.com”); // 默认值

claims.put(“sub”, client_id);

PKCS8EncodedKeySpec pkcs8EncodedKeySpec = new PKCS8EncodedKeySpec(readKey());

KeyFactory keyFactory = KeyFactory.getInstance(“EC”);

PrivateKey privateKey = keyFactory.generatePrivate(pkcs8EncodedKeySpec);

String client_secret = Jwts.builder().setHeader(header).setClaims(claims)

.signWith(SignatureAlgorithm.ES256, privateKey).compact();

String url = “https://appleid.apple.com/auth/token”;

// POST 请求

Map<String, String> params = new HashMap<String, String>();

Map<String, String> headers = new HashMap<String, String>();

headers.put(“Content-Type”, “application/x-www-form-urlencoded”);

params.put(“client_id”, client_id);

params.put(“client_secret”, client_secret);

params.put(“code”, code);

params.put(“grant_type”, “authorization_code”);

params.put(“redirect_uri”, “”);

HttpClientResult httpClientResult = HttpClientUtil.doPost(url, headers, params);

Map<String, Object> jsonObject = JSONObject.parseObject(httpClientResult.getContent());

DecodedJWT jwtString = JWT.decode(jsonObject.get(“id_token”).toString());

String sub = jwtString.getSubject();

}

private byte[] readKey() throws Exception {
String temp = “*******”;//记得去掉换行符号，密钥

return Base64.getDecoder().decode(temp);

}

}

jar包依赖

<dependency>

<groupId>io.jsonwebtoken</groupId>

<artifactId>jjwt</artifactId>

<version>0.7.0</version>

</dependency>

<!– https://mvnrepository.com/artifact/com.auth0/java-jwt –>

<dependency>

<groupId>com.auth0</groupId>

<artifactId>java-jwt</artifactId>

<version>3.10.3</version>

</dependency>