一丶申请AppKey与AppSecret
与管理员联系获取appKey与appSecret，appKey是与数字人平台的客户渠道绑定的。
二丶 免登录服务端接入
2.1 AppKey+AppSecret 换 rabbitToken
服务调用数字人开放平台接口获取rabbitToken，接口文档地址：获取rabbitToken
rabbitToken 是调用所有数字人开放平台接口的令牌。
请妥善保管appKey和appSecret ,一般保存在服务端配置文件中。
2.2 携带rabbitToken 进行数字人平台登录并获取到重定向地址。
服务端提供联合登录接口给前端，接口内部逻辑：调用数字人开放平台接口（thirdId+thirdUrl）获取到重定向地址，并进行重定向。 接口文档地址：获取重定向URL
数字人开放平台内部逻辑：
- 判断是否绑定第三方用户Id（thirdId）
- 生成ticket 对于缓存了thirdId等
- 已绑定：生成数字人平台tz_token，并保存到ticket中
- 未绑定：后续要携带thirdId跳转到登录页面进行登录并绑定thirdId
注意：1. 接口请求头要携带tabbitToken
...
2. 如果是内嵌ifream形式 thirdUrl必须传入当前域名，数字人平台编辑器必须是同源。
2.3 前端调用服务端联合登录接口，进行免登录。
...
三丶Ifream内嵌页面处理
3.1 Nginx处理
要保证数字人平台与第三方是同一个域名，不然数字人编辑器内有浏览器同源策略限制。
需要第三方nginx代理一下数字人平台的域名。
配置参考如下：
| 代码块 | ||
|---|---|---|
| ||
server |
...
listen 80;
listen 443 ssl http2;
...
{ listen 80; listen 443 ssl http2; ssl_certificate "/opt/app/all_config/abug/cert.pem"; |
...
ssl_certificate_key "/opt/app/all_config/abug/key.pem"; |
...
ssl_protocols TLSv1.1 TLSv1.2; |
...
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; |
...
ssl_prefer_server_ciphers on; |
...
ssl_session_cache shared:SSL:10m; |
...
ssl_session_timeout 10m; |
...
server_name abug.jy520.fun; |
...
# 这里是第三方主页
location / {
# 需要加两个允许跨域得头 不然无法进入数字人编辑器
...
# 这里是第三方主页 location / { # 需要加两个允许跨域得头 不然无法进入数字人编辑器 add_header Cross-Origin-Opener-Policy same-origin; |
...
add_header Cross-Origin-Embedder-Policy require-corp; |
...
root /opt/app; |
...
index test.html; |
...
}
# 代理兔展后端
...
} # 代理兔展后端 location /api/rabbitlab{ |
...
proxy_pass https://digitalman.h5no1.com; |
...
}
# 代理兔展开放平台
...
} # 代理兔展开放平台 location /open/platform{ |
...
proxy_pass https://digitalman.h5no1.com; |
...
}
# 代理兔展前端页面
location /digitalman {
...
} # 代理兔展前端页面 location /digitalman { proxy_pass https://digitalman.h5no1.com; |
...
}
}
...
}
} |
3.2 前端Ifream参考
<iframe src="https://abug.jy520.fun/demo/unionLogin?thirdId=third_3" height="800px" width="100%" ></iframe>
...
接口是第三方服务端提供 也就是2.2步中的。
...
四丶示例代码
4.1后端接入示例：
| 代码块 | ||
|---|---|---|
| ||
@Slf4j |
...
@Component |
...
public class RabbitOpenPlatformManager |
...
...
{ @Value("${openPlatform.host:https://test.digitalman.h5no1.com}") |
...
private String host;
...
private String host; @Value("${openPlatform.appKey:069251338630322213976003}") |
...
private String appKey;
...
private String appKey; @Value("${openPlatform.appSecret:924025c658bab641b4432b31921a37007d989e4be36f21c06dd477d2fb604d36}") |
...
private String appSecret;
...
private String appSecret; @Value("${openPlatform.thirdUrl:https://test.digitalman.h5no1.com}") |
...
private String thirdUrl;
...
private String thirdUrl; private static final String TOKEN_KEY = "openPlatform:token"; |
...
@Resource
...
@Resource private RedisTemplate<String, String> redisTemplate; |
...
private final RestTemplate restTemplate = new RestTemplate(); |
...
...
/** |
...
* 获得令牌
*
* @return {@link String}
*/
public String getToken() {
...
* 获得令牌 * * @return {@link String} */ public String getToken() { String rabbitToken = redisTemplate.opsForValue().get(TOKEN_KEY); |
...
if (rabbitToken != null) |
...
return rabbitToken;
}
...
{ return rabbitToken; } String url = "/open/platform/auth/getRabbitToken"; |
...
HashMap<String, String> map = new HashMap<>(2); |
...
map.put("appKey", appKey); |
...
map.put("appSecret", appSecret); |
...
ParameterizedTypeReference<RabbitResponse<AppLoginResponse>> responseType = new ParameterizedTypeReference<RabbitResponse<AppLoginResponse>>() |
...
};
HttpHeaders headers = new HttpHeaders();
...
{ }; HttpHeaders headers = new HttpHeaders(); headers.setContentType(MediaType.parseMediaType("application/json; charset=UTF-8")); |
...
HttpEntity<String> entity = new HttpEntity<>(JSONUtil.toJsonStr(map), headers); |
...
ResponseEntity<RabbitResponse<AppLoginResponse>> exchange = restTemplate.exchange(host + url, HttpMethod.POST, entity, responseType); |
...
RabbitResponse<AppLoginResponse> response = exchange.getBody(); |
...
log.info("response:{}", response); |
...
if (response == null) |
...
{ throw new RuntimeException("响应异常"); |
...
}
...
} if ("0".equals(response.getCode())) |
...
{ AppLoginResponse appLoginResponse = response.getData(); |
...
rabbitToken = appLoginResponse.getRabbitToken(); |
...
redisTemplate.opsForValue().set(TOKEN_KEY, rabbitToken, appLoginResponse.getExpireIn() / 2, TimeUnit.SECONDS); |
...
return rabbitToken;
} else {
...
return rabbitToken; } else { throw new RuntimeException(response.getErrorMsg()); |
...
}
}
/**
* 联合登录
*
* @param thirdId 第三方账户id
* @return {@link String}
*/
public String unionLogin(String thirdId) {
...
} } /** * 联合登录 * * @param thirdId 第三方账户id * @return {@link String} */ public String unionLogin(String thirdId) { String url = "/open/platform/digital/third/getRedirectUrl"; |
...
HashMap<String, String> map = new HashMap<>(2); |
...
map.put("thirdId", thirdId); |
...
map.put("thirdUrl", thirdUrl); |
...
ParameterizedTypeReference<RabbitResponse<RedirectUrlVo>> responseType = new ParameterizedTypeReference<RabbitResponse<RedirectUrlVo>>() |
...
};
HttpHeaders headers = new HttpHeaders();
...
{ }; HttpHeaders headers = new HttpHeaders(); headers.set("rabbitToken", getToken()); |
...
headers.setContentType(MediaType.parseMediaType("application/json; charset=UTF-8")); |
...
HttpEntity<String> entity = new HttpEntity<>(JSONUtil.toJsonStr(map), headers); |
...
ResponseEntity<RabbitResponse<RedirectUrlVo>> exchange = restTemplate.exchange(host + url, HttpMethod.POST, entity, responseType); |
...
RabbitResponse<RedirectUrlVo> response = exchange.getBody(); |
...
if (response == null) |
...
{ throw new RuntimeException("响应异常"); |
...
}
...
} if ("0".equals(response.getCode())) |
...
{ RedirectUrlVo data = response.getData(); |
...
return data.getRedirectUrl(); |
...
} else {
...
} else { throw new RuntimeException(response.getErrorMsg()); |
...
}
}
@Data
static class RabbitResponse<T> {
private String code;
private String showMsg;
private String errorMsg;
private String requestId;
private T data;
}
@Data
static class AppLoginResponse {
/**
* 授权令牌
*/
private String rabbitToken;
/**
* 授权令牌 的有效期
*/
private Long expireIn;
}
@Data
static class RedirectUrlVo {
/**
* 重定向地址
*/
private String redirectUrl;
}
} |
| 代码块 | ||
|---|---|---|
|
}
}
@Data
static class RabbitResponse<T> {
private String code;
private String showMsg;
private String errorMsg;
private String requestId;
private T data;
}
@Data
static class AppLoginResponse {
/**
* 授权令牌
*/
private String rabbitToken;
/**
* 授权令牌 的有效期
*/
private Long expireIn;
}
@Data
static class RedirectUrlVo {
/**
* 重定向地址
*/
private String redirectUrl;
}
...
@RequestMapping("/") |
...
@RestController |
...
public class DemoController |
...
@Resource
private RabbitOpenPlatformManager rabbitOpenPlatformManager;
...
{ @Resource private RabbitOpenPlatformManager rabbitOpenPlatformManager; @GetMapping("/unionLogin") |
...
public void unionLogin(String thirdId, HttpServletResponse response) throws IOException |
...
{ String redirectUrl = rabbitOpenPlatformManager.unionLogin(thirdId); |
...
response.sendRedirect(redirectUrl); |
...
}
}
...
}
} |
4.2前端示例
| 代码块 | ||
|---|---|---|
| ||
<!DOCTYPE html> |
...
<html> |
...
<head>
...
<head> <meta charset="utf-8"> |
...
<title></title> |
...
</head> |
...
<body>
...
<body> <iframe src="https://xxx/demo/unionLogin?thirdId=third_3" |
...
height="800px" width="100%" id="myIframe"></iframe> |
...
</body> |
...
</ |
...
html> |