Process of scanning code for login

Getting the app Identifier and appkey/appSecret

Firstly, You should go to developer center of the open platform to create a scan code for logging in to app

Fill in the following required information to complete the application creation

After creating the application, you can copy the application identifier (as a parameter value for constructing the login page client_id), and click on “Details” to enter the configuration page of the application.

Configure the basic information of the application (Check the App Key and App Secret of the application at the application identifier. The basic information can be editedas is shown in the figure below.)

Click on the application configuration, and configure the callback address.

Construct login page of scanning code

DingTalk related to government affairs can be logged in through web system by scanning code in two ways.

The first way: use the scan code provided by Government-related DingTalk to log in to the page

In the corporate web system, users can click on “using DingTalk to scan the code” to log in, and the third-party web system will switch to the following address:

https://login.dg-work.cn/oauth2/auth.htm?response_type=code&client_id=应用标识&redirect_uri=回调地址&scope=get_user_info&authType=QRCODE

The values of the two parameters “client_id” and “redirect_uri” in the URL are filled in with the application ID and callback address of the third web system. After users ofDingtalk related to government affairs scans the code to log in for confirmation, it will redirect to the “redirect_uri” you specified, and temporarily add the two parameters of authorization code “code” (this “code” is not “authcode”) and “state”.

Please note:
The domain name involved in the parameter “redirect_uri=callback address” must be the same as the callback domain name which is filled in when app authorization is created by scanning code for login, otherwise it will prompt you withno access authority.
The size of the generated 2D code is fixed at 200*200px, which cannot be modified.

The second way: The QR code for logging in Dingtalk related to government affairs can be included in its website page.

tep 1: It is included in the page by“iframe”
Add “embedMode=true” to the address constructed by the first way

https://login.dg-work.cn/oauth2/auth.htm?response_type=code&client_id=应用标识&redirect_uri=回调地址&scope=get_user_info&authType=QRCODE&embedMode=true

Step 2: After scanning the code successfully, you need to monitor the scanning result in the page

<script type="application/javascript">
    window.addEventListener('message', function(event) {
            // 这里的event.data 就是登录成功的信息
              // 数据格式：{ "code": "aaaa", "state": "bbbb" }
        alert(JSON.stringify(event.data));
    });
</script>

Please note: The size of the generated QR is fixed at 200*200px, which cannot be modified.

Domain name in each environment/login domain name

Getting Application“access_token”

To get access_token, please refer toGet access_token. Note: please use the ak/sk of the code-scanning app to get“the access_token”

Get personal information of authorized users

The server gets the personal information of the authorized users through the temporary authorization code

Request method：POST（HTTPS）

Interface name

/rpc/oauth2/getuserinfo_bycode.json
Note: Please use the access domain name to call the interface, and you cannot use the login domain name to call the interface. Related domain name reference：access domain name in each environment/login domain name

Request parameter

Return Results

{
    "success":true,
    "content":{
        "data":{
            "accountId":100135,
            "lastName":"俊锋",
            "clientId":"mozi-buc-sso",
            "realmId":12371,
            "tenantName":"租户2",
            "realmName":"租户2",
            "namespace":"local",
            "tenantId":12371,
            "nickNameCn":"俊锋",
            "tenantUserId":"12371$100135",
            "account":"admin2"
        },
        "success":true,
        "responseMessage":"成功",
        "responseCode":"0"
    }
}

Note: When the interface is called by a superadministrative account and there is no “employeeCode” in the back result, you can call the interface by an ordinary account.

Return parameter

Error code