# checkSessionKey ### checkSessionKey 校驗服務器所保存的登錄態 `session_key` 是否合法。為了保持 `session_key` 私密性，接口不明文傳輸 `session_key`，而是通過校驗登錄態簽名完成。 #### 請求地址 ``` <pre class="prettyprint"><ol class="linenums"><li class="l"><code class="pcalibre9 pcalibre8 pcalibre7"><span class="pln">GET https</span><span class="pun">:</span><span class="com">//api.weixin.qq.com/wxa/checksession?access_token=ACCESS_TOKEN&signature=SIGNATURE&openid=OPENID&sig_method=SIG_METHOD</span></code></li></ol> ``` #### 參數 ##### string access\_token [接口調用憑證](/read/wechat-game-api/297.md) ##### string openid 用戶唯一標識符 ##### string signature [用戶登錄態簽名](https://developers.weixin.qq.com/minigame/dev/tutorial/open-ability/session-signature.html) ##### string sig\_method 用戶登錄態簽名的哈希方法，目前只支持 hmac\_sha256 #### 返回值 ##### Object 返回的 JSON 數據包 屬性類型說明支持版本errcodenumber錯誤碼errmsgstring錯誤信息**errcode 的合法值** 值說明0ok 請求成功87009invalid signature 簽名錯誤#### 調用示例 ``` <pre class="prettyprint"><ol class="linenums"><li class="l"><code class="pcalibre9 pcalibre8 pcalibre7"><span class="pln">curl </span><span class="pun">-</span><span class="pln">G </span><span class="str">'https://api.weixin.qq.com/wxa/checksession?access_token=OsAoOMw4niuuVbfSxxxxxxxxxxxxxxxxxxx&signature=fefce01bfba4670c85b228e6ca2b493c90971e7c442f54fc448662eb7cd72509&openid=oGZUI0egBJY1zhBYw2KhdUfwVJJE&sig_method=hmac_sha256'</span></code></li></ol> ``` #### 返回示例 正確時的返回JSON數據包如下： ``` <pre class="prettyprint"><ol class="linenums"><li class="l"><code class="pcalibre9 pcalibre8 pcalibre7"><span class="pun">{</span><span class="str">"errcode"</span><span class="pun">:</span><span class="pln"> </span><span class="lit">0</span><span class="pun">,</span><span class="pln"> </span><span class="str">"errmsg"</span><span class="pun">:</span><span class="pln"> </span><span class="str">"ok"</span><span class="pun">}</span></code></li></ol> ``` 錯誤時的返回JSON數據包如下（示例為簽名錯誤）： ``` <pre class="prettyprint"><ol class="linenums"><li class="l"><code class="pcalibre9 pcalibre8 pcalibre7"><span class="pun">{</span><span class="str">"errcode"</span><span class="pun">:</span><span class="pln"> </span><span class="lit">87009</span><span class="pun">,</span><span class="pln"> </span><span class="str">"errmsg"</span><span class="pun">:</span><span class="pln"> </span><span class="str">"invalid signature"</span><span class="pun">}</span></code></li></ol> ``` > 原文: <https://developers.weixin.qq.com/minigame/dev/api/open-api/login/checkSessionKey.html>