User authorized login

DotWallet provides familiar oAuth login and authorization. The user can authorize the app to access certain basic user information.

• User authorized login

  • Step 1: Prompt user to authorize and get code

  • Step 2: Use code to get access token

  • Step 3: Get user information

  • Refresh token

  • Validate token

Step 1: Prompt user to authorize and get code

The code is used to exchange for an access_token. Each time the user completes an authorization, the code will be a new, different code. The code can only be used once and will expire if not used within 5 minutes.

Redirect the browser view to the following URL, with the following parameters to show the user authorization prompt:

• Address: https://www.ddpurse.com/openapi/get_code?app_id={app_id}&redirect_uri={redirect_uri}

• Method: GET (request must be from the browser not a server)

• Params:

During development do not use localhost for redirect_uri or notice_uri. First find your local IP with the terminal command ifconfig | grep netmask. For example if it is 192.168.1.142 then you can put http://192.168.1.142:3000for the redirect. Remember to also go to the DotWallet for Developers Application Settings page, and register 192.168.1.142:3000(no http) in the Callback domain field.

The DotWallet authorization page

If the user agrees to authorize, the page will redirect to {redirect_uri}/?code={code}

If the user refuses to authorize, then they will also be redirected to the redirect page, but without the code

Failure example:

{
  "code": 10003,
  "msg": "redirect_uri is inconsistent with previous setting."
  }
}

Step 2: Use code to get access token

Important:

• secret and access_token are sensitive, high security information and must only be saved on the server and never sent to the client.
• Subsequent steps such as refreshing access_token and obtaining user information through access_token must also be initiated from the server.

• Address: https://www.ddpurse.com/openapi/access_token

• Method: POST

• Body params(JSON):

Example request:

curl --location --request POST 'https://www.ddpurse.com/openapi/access_token' \
--header 'Content-Type: application/json' \
--data-raw '{
	"app_id":"0d158bc3605fffef7046f0c9c7e4bf",
	"secret":"e9943b6b167554f55e39c1428c1d86",
	"code":"593f40971422015be811f8526970436f5326b5371a514ca5c45b53bc4ec85039"
}

Success:

Note: "code" here is the error response code. 0 means success

{
  "code": 0,
  "msg": "",
  "data": {
    "access_token": "ACCESS_TOKEN",
    "expires_in": 7200,
    "refresh_token": "REFRESH_TOKEN"
  }
}

Failure example:

{
  "code": 10017,
  "data": {},
  "msg": "Login error, invalid code"
}

Return params description:

Step 3: Get user information

• Address : https://www.ddpurse.com/openapi/get_user_info?access_token={access_token}

• Method: GET

• Params:

Success:

Note: "code" here is the error response code. 0 means success

{
  "code": 0,
  "msg": "",
  "data": {
    "user_open_id": "USER_OPEN_ID",
    "user_name": "USER_NAME",
    "user_avatar": "USER_AVATAR",
    "user_address": "1BNPUQAGjAmW9m8cK3HV4Xp3GZLnW1UZ99",
    "pay_status": 1,
    "pre_amount": 800,
    "total_amount": 12000
  }
}

Failure example:

{
  "code": 10021,
  "msg": "login error, error retrieving user information, error code: 10021",
  "data": {}
}

Return params description:

Refresh token

Because access_token has a short validity period (7200 seconds), when access_token expires you can use refresh_token to refresh. refresh_token will expire in 30 days. When refresh_token expires, the user needs to re-authorize。

• Address : https://www.ddpurse.com/openapi/refresh_access_token?app_id={app_id}&refresh_token={refresh_token}

• Method: GET

• Params:

Success:

Note: "code" here is the error response code. 0 means success

{
  "code": 0,
  "msg": "",
  "data": {
    "access_token": "ACCESS_TOKEN",
    "expires_in": 7200,
    "refresh_token": "REFRESH_TOKEN"
  }
}

Failure example:

{
  "code": 10303,
  "msg": "refresh access_token error",
  "data": {}
}

Return params description:

Validate token

• Address: https://www.ddpurse.com/openapi/check_access_token/?access_token={access_token}

• Method: GET

• Params:

Success:

Note: "code" here is the error response code. 0 means success

{
  "code": 0,
  "msg": "",
  "data": {
    "status": 1,
    "expire_time": 4010
  }
}

Failure example:

{
  "code": 10021,
  "msg": "Login error, user_open_id can not be null",
  "data": {}
}

Return params description: