Comments (3)
微信只能配置一个安全域名,所以必然得配置中间页所在的域名,也就是将中间页配置在安全域名下。
由该中间页获取到code之后跳转至同一个公众号下其他需要OAuth认证的域名。对于微信来说,他们看到的永远只是中间页在获取认证,跟其他页面没有关系,跳转都是中间页获取到code之后再进行跳转的。
目前已经经过广泛使用,可行性已经经过大量认证了,不必存疑。
from getweixincode.
THX,经尝试可行,建议可在if逻辑中加入OAuth下各子业务的来源(主域或referrer的鉴权),以保证appid在中间页不会被其它非法程序频繁调用。
from getweixincode.
这个功能可以根据需求自定义添加
from getweixincode.
Related Issues (20)
- 这个URL是对外的,跳转地址可以自定义,如果被恶意利用了怎么办? HOT 1
- 嵌入公众号问题 HOT 2
- 使用的时候部分客户端会出现code been used, "errcode":40163 HOT 1
- 授权回调域名校验出错
- redirect_url 多参数的情况是不是不适用呢 HOT 5
- 二次获取access_token问题 HOT 1
- ios新版本是否不可用 HOT 1
- 这样跳转以后,不出现微信获取信息确认页面了? HOT 1
- 如何解决「取消授权」留在中间页,而不是关闭页面? HOT 5
- 单页应用spa, 路由使用hash模式, 会导致重定向的url异常 HOT 5
- 是不是不支持用了cdn和强制性跳转到https的网站? HOT 1
- 使用微信开发WEB工具会一直显示未绑定开发者 HOT 1
- 第二次腾讯回调时候,怎么还有redirect_uri这个参数? HOT 5
- 通过一个域名301到您的这个授权url,微信不跳转
- 为什么需要第二步?
- 中间页授权前提示 请在微信客户端打开链接
- 你好,使用本方法后一直跳转授权登录页面是什么问题?
- 域名转发成功,但是后台获取openid,展示code已被使用过
- 授权问题
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from getweixincode.