使用 Swift 中的 ASWebAuthenticationSession 解决 Instagram 登录问题

使用 ASWebAuthenticationSession 在 Swift 中处理 Instagram 登录

该解决方案使用 SwiftUI 和 Apple 的 AuthenticationServices 框架来处理 Instagram 登录问题。

import SwiftUI
import AuthenticationServices

struct InstagramLoginView: View {
    @State private var authSession: ASWebAuthenticationSession?
    @State private var token: String = ""
    @State private var showAlert: Bool = false
    @State private var alertMessage: String = ""

    var body: some View {
        VStack {
            Text("Instagram Login")
                .font(.largeTitle)
                .padding()

            Button(action: { startInstagramLogin() }) {
                Text("Login with Instagram")
                    .padding()
                    .background(Color.blue)
                    .foregroundColor(.white)
                    .cornerRadius(10)
            }

            if !token.isEmpty {
                Text("Token: \(token)")
                    .padding()
            }
        }
        .alert(isPresented: $showAlert) {
            Alert(title: Text("Error"),
                  message: Text(alertMessage),
                  dismissButton: .default(Text("OK")))
        }
    }

    func startInstagramLogin() {
        let clientID = "XXXXXXXXXX"
        let redirectURI = "https://example.com"

        guard let authURL = URL(string:
            "https://api.instagram.com/oauth/authorize?client_id=\(clientID)&redirect_uri=\(redirectURI)&scope=user_profile,user_media&response_type=code"
        ) else {
            alertMessage = "Invalid URL"
            showAlert = true
            return
        }

        authSession = ASWebAuthenticationSession(url: authURL, callbackURLScheme: nil) { callbackURL, error in
            if let error = error {
                alertMessage = error.localizedDescription
                showAlert = true
                return
            }

            guard let callbackURL = callbackURL else {
                alertMessage = "Invalid callback URL"
                showAlert = true
                return
            }

            if let code = URLComponents(string: callbackURL.absoluteString)?.queryItems?.first(where: { $0.name == "code" })?.value {
                getInstagramAccessToken(authCode: code)
            }
        }
        authSession?.presentationContextProvider = self
        authSession?.start()
    }

    func getInstagramAccessToken(authCode: String) {
        let tokenURL = "https://api.instagram.com/oauth/access_token"
        var request = URLRequest(url: URL(string: tokenURL)!)
        request.httpMethod = "POST"

        let clientID = "XXXXXXXXXX"
        let clientSecret = "XXXXXXXXXX"
        let redirectURI = "https://example.com"

        let params = "client_id=\(clientID)&client_secret=\(clientSecret)&grant_type=authorization_code&redirect_uri=\(redirectURI)&code=\(authCode)"
        request.httpBody = params.data(using: .utf8)
        request.setValue("application/x-www-form-urlencoded", forHTTPHeaderField: "Content-Type")

        URLSession.shared.dataTask(with: request) { data, response, error in
            if let error = error {
                alertMessage = error.localizedDescription
                showAlert = true
                return
            }

            guard let data = data else {
                alertMessage = "No data received"
                showAlert = true
                return
            }

            if let jsonResponse = try? JSONSerialization.jsonObject(with: data) as? [String: Any],
               let accessToken = jsonResponse["access_token"] as? String {
                DispatchQueue.main.async { token = accessToken }
            } else {
                alertMessage = "Failed to get access token"
                showAlert = true
            }
        }.resume()
    }
}

extension InstagramLoginView: ASWebAuthenticationPresentationContextProviding {
    func presentationAnchor(for session: ASWebAuthenticationSession) -> ASPresentationAnchor {
        UIApplication.shared.windows.first { $0.isKeyWindow }!
    }
}

实现 Django 进行重定向 URI 验证

该脚本使用 Django 作为后端来验证 Instagram OAuth 回调并安全地处理令牌。

from django.http import JsonResponse, HttpResponseRedirect
from django.views.decorators.csrf import csrf_exempt
import requests

CLIENT_ID = 'XXXXXXXXXX'
CLIENT_SECRET = 'XXXXXXXXXX'
REDIRECT_URI = 'https://example.com/callback'

@csrf_exempt
def instagram_callback(request):
    code = request.GET.get('code')
    if not code:
        return JsonResponse({'error': 'Missing authorization code'})

    token_url = 'https://api.instagram.com/oauth/access_token'
    payload = {
        'client_id': CLIENT_ID,
        'client_secret': CLIENT_SECRET,
        'grant_type': 'authorization_code',
        'redirect_uri': REDIRECT_URI,
        'code': code
    }

    response = requests.post(token_url, data=payload)
    if response.status_code == 200:
        return JsonResponse(response.json())
    return JsonResponse({'error': 'Failed to retrieve access token'})

1. 要了解使用 ASWebAuthenticationSession 的 OAuth 和 Instagram 登录，请参阅有关身份验证的官方 Instagram API 文档 这里 。
2. Apple官方使用指南 可以在他们的文档中找到 这里 。
3. 通过各种教程（例如本教程）了解有关在 iOS 应用程序中管理 OAuth 令牌的更多信息 这里 。