thinkphp小程序API开发登录流程怎么实现

wx.login({
  success(res) {
    if (res.code) {
      // 将 code 发送给你的 ThinkPHP 后端
      wx.request({
        url: 'https://yourdomain.com/api/user/login',
        method: 'POST',
        data: { code: res.code },
        success: (result) => {
          // 接收后端返回的 token 或用户信息
          const token = result.data.token;
          wx.setStorageSync('token', token); // 存储 token
        }
      });
    }
  }
});

<?php
namespace app\controller;

use think\Controller;
use think\facade\HttpClient;

class UserController extends Controller
{
    public function login()
    {
        $code = input('post.code');

        if (!$code) {
            return json(['error' => '缺少 code'], 400);
        }

        $appid = 'your_appid';       // 替换为你的小程序 AppID
        $secret = 'your_secret';     // 替换为你的小程序 AppSecret

        $url = "https://api.weixin.qq.com/sns/jscode2session";
        $params = [
            'appid' => $appid,
            'secret' => $secret,
            'js_code' => $code,
            'grant_type' => 'authorization_code'
        ];

        $response = HttpClient::get($url, $params);
        $wxData = json_decode($response->getBody(), true);

        if (isset($wxData['errcode'])) {
            return json(['error' => $wxData['errmsg']], 400);
        }

        $openid = $wxData['openid'];
        $sessionKey = $wxData['session_key'];

        // 根据 openid 查找或创建用户
        $user = \app\model\User::firstOrCreate(['openid' => $openid]);

        // 生成本地 token（可使用 JWT 或自定义随机串）
        $token = md5($openid . time() . rand(1000, 9999));

        // 将 token 存入数据库或缓存，并设置过期时间
        $user->token = $token;
        $user->save();

        return json([
            'token' => $token,
            'user'  => $user
        ]);
    }
}

<?php
namespace app\middleware;

class CheckToken
{
    public function handle($request, \Closure $next)
    {
        $token = $request->header('Authorization') 
                 ?? $request->param('token');

        if (!$token) {
            return json(['error' => '未登录'], 401);
        }

        $user = \app\model\User::where('token', $token)->find();

        if (!$user) {
            return json(['error' => '登录已失效'], 401);
        }

        // 将用户信息绑定到请求对象
        $request->user = $user;

        return $next($request);
    }
}

$pc = new \WXBizDataCrypt($appid, $sessionKey);
$result = $pc->decryptData($encryptedData, $iv, $data);