onMenuShareAppMessage:fail, the permission value is offline verifying

时间:2024-04-26 22:44:20

微信分享时,提示如下错误
onMenuShareAppMessage:fail, the permission value is offline verifying

原因是 $_SERVER['PHP_SELF'] 中的 index.php 造成的和当前浏览器域名不一致造成的。
$_SERVER['PHP_SELF'] = https://domain.com/q/index.php?19D2675H1
当前浏览器 URL 为:  = https://domain.com/q/?19D2675H1

合法的应该为:
$_SERVER['PHP_SELF'] = https://domain.com/q/?19D2675H1
当前浏览器 URL 为:  = https://domain.com/q/?19D2675H1

解决方案:str_replace('index.php','',$_SERVER['PHP_SELF'])

<?php
class JSSDK {
	
	private $appId;
	private $appSecret;

	public function __construct( $appId, $appSecret ) {
		$this->appId = $appId;
		$this->appSecret = $appSecret;
	}

	public function getSignPackage() {
		$jsapiTicket = $this->getJsApiTicket();
		$scheme = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') ? 's' : '';
		$query_string = empty($_SERVER['QUERY_STRING']) ? '' : '?' . $_SERVER['QUERY_STRING'];
		
		/** 2024-04-26 微信分享时,提示如下错误
			onMenuShareAppMessage:fail, the permission value is offline verifying
			
			原因是 $_SERVER['PHP_SELF'] 中的 index.php 造成的和当前浏览器域名不一致造成的。
			$_SERVER['PHP_SELF'] = https://domain.com/q/index.php?19D2675H1
			当前浏览器 URL 为:  = https://domain.com/q/?19D2675H1
			
			合法的应该为:
			$_SERVER['PHP_SELF'] = https://domain.com/q/?19D2675H1
			当前浏览器 URL 为:  = https://domain.com/q/?19D2675H1
			
			解决方案:str_replace('index.php','',$_SERVER['PHP_SELF'])
		*/
		$url = 'http'.$scheme.'://'.$_SERVER['HTTP_HOST'].str_replace('index.php','',$_SERVER['PHP_SELF']).$query_string;
		$timestamp = time();
		$nonceStr = $this->createNonceStr();
		$string = 'jsapi_ticket=' . $jsapiTicket . '&noncestr=' . $nonceStr . '&timestamp=' . $timestamp . '&url=' . $url;
		$signature = sha1($string);
		$signPackage = array (
			'appId'     => $this->appId,
			'nonceStr'  => $nonceStr,
			'timestamp' => $timestamp,
			'url'       => $url,
			'signature' => $signature,
			'rawString' => $string
		);
		return $signPackage; 
	}

	private function createNonceStr( $length = 16 ) {
		$chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
		$str = '';
		for ( $i = 0; $i < $length; $i++ ) {
			$str .= substr($chars, mt_rand(0, strlen($chars) - 1), 1);
		}
		return $str;
	}

	private function getJsApiTicket() {
		// jsapi_ticket 应该全局存储与更新,以下代码以写入到文件中做示例
		$path = 'jsapi_ticket.json';
		if (!file_exists($path)) {
			file_get_contents($path,'{"expire_time":0,"jsapi_ticket":""}');
		}
		
		$data = json_decode(file_get_contents($path));
		if ($data->expire_time < time()) {
			$accessToken = $this->getAccessToken();
			// 如果是企业号用以下 URL 获取 ticket
			// $url = "https://qyapi.weixin.qq.com/cgi-bin/get_jsapi_ticket?access_token=$accessToken";
			$url = "https://api.weixin.qq.com/cgi-bin/ticket/getticket?type=jsapi&access_token=$accessToken";
			$res = json_decode($this->httpGet($url));
			$ticket = $res->ticket;
			if ($ticket) {
				$data->expire_time = time() + 7000;
				$data->jsapi_ticket = $ticket;
				$fp = fopen($path, 'w');
				fwrite($fp, json_encode($data));
				fclose($fp);
			}
		} else {
			$ticket = $data->jsapi_ticket;
		}
		return $ticket;
	}

	private function getAccessToken() {
		// access_token 应该全局存储与更新,以下代码以写入到文件中做示例
		$data = json_decode(file_get_contents('access_token.json'));
		if ($data->expire_time < time()) {
			// 如果是企业号用以下URL获取access_token
			// $url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken?corpid=$this->appId&corpsecret=$this->appSecret";
			$url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=$this->appId&secret=$this->appSecret";
			$res = json_decode($this->httpGet($url));
			$access_token = $res->access_token;
			if ($access_token) {
				$data->expire_time = time() + 7000;
				$data->access_token = $access_token;
				$fp = fopen('access_token.json', 'w');
				fwrite($fp, json_encode($data));
				fclose($fp);
			}
		} else {
			$access_token = $data->access_token;
		}
		return $access_token;
	}

	private function httpGet( $url ) {
		$curl = curl_init();
		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($curl, CURLOPT_TIMEOUT, 500);
		curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
		curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
		curl_setopt($curl, CURLOPT_URL, $url);
		$res = curl_exec($curl);
		curl_close($curl);
		return $res;
	}
}