+ * 如果使用app_auth_code换取token，则为authorization_code， + * 如果使用refresh_token换取新的token，则为refresh_token + */ + @NotBlank(message = "授权类型不能为空") + private String grant_type; + + /** + * 授权码.与refresh_token二选一，用户对应用授权后得到，即第一步中开发者获取到的app_auth_code值 + */ + private String code; + + /** + * 刷新令牌.与code二选一，可为空，刷新令牌时使用 + */ + private String refresh_token; +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/FetchTokenResult.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/FetchTokenResult.java new file mode 100644 index 00000000..be4360b2 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/FetchTokenResult.java @@ -0,0 +1,39 @@ +package com.gitee.sop.sopauth.auth; + +import lombok.Data; + +/** + * 使用app_auth_code换取app_auth_token返回结果 + * @author tanghc + */ +@Data +public class FetchTokenResult { + /** + * 授权令牌 + */ + private String app_auth_token; + + /** + * 用户id + */ + private String user_id; + + /** + * 令牌有效期. -1:永久有效 + */ + private long expires_in = -1; + + /** + * 刷新令牌有效期. -1:永久有效 + */ + private long re_expires_in = -1; + + /** + * 刷新令牌时使用。 + * 刷新令牌后，我们会保证老的app_auth_token从刷新开始10分钟内可继续使用，请及时替换为最新token + */ + private String app_refresh_token; + + private String error; + private String error_description; +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OAuth2Config.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OAuth2Config.java new file mode 100644 index 00000000..6a021dc0 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OAuth2Config.java @@ -0,0 +1,46 @@ +package com.gitee.sop.sopauth.auth; + +import lombok.Data; + +/** + * @author tanghc + */ +@Data +public class OAuth2Config { + + private static OAuth2Config instance = new OAuth2Config(); + + public static OAuth2Config getInstance() { + return instance; + } + + public static void setInstance(OAuth2Config instance) { + OAuth2Config.instance = instance; + } + + /** + * 应用授权的app_auth_code唯一的；app_auth_code使用一次后失效，一天（从生成app_auth_code开始的24小时）未被使用自动过期； + * app_auth_token永久有效。 + */ + private int codeTimeoutSeconds = 86400; + /** + * accessToken有效时间，单位秒 + * -1 永久有效 + */ + private int accessTokenExpiresIn = -1; + + /** + * app_refresh_token有效时间，单位秒，accessToken有效时间的3倍。当小于0，永久有效 + */ + private int refreshTokenExpiresIn = accessTokenExpiresIn * 3; + + /** + * 刷新令牌后，我们会保证老的app_auth_token从刷新开始10分钟内可继续使用，请及时替换为最新token + */ + private int afterRefreshExpiresIn = 60 * 10; + + /** + * 登录视图页面用于，mvc视图，如：loginView + */ + private String oauth2LoginUri = "/oauth2/login"; +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OAuth2Manager.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OAuth2Manager.java new file mode 100644 index 00000000..9f5d1c06 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OAuth2Manager.java @@ -0,0 +1,93 @@ +package com.gitee.sop.sopauth.auth; + + +import com.gitee.sop.sopauth.auth.exception.LoginErrorException; + +import javax.servlet.http.HttpServletRequest; +import java.util.Map; + +/** + * 认证服务，需要自己实现 + * @author tanghc + * + */ +public interface OAuth2Manager { + + /** + * 添加 auth code + * + * @param authCode + * code值 + * @param authUser + * 用户 + */ + void addAuthCode(String authCode, OpenUser authUser); + + /** + * 添加accessToken + * @param accessToken token值 + * @param refreshToken refreshToken + * @param authUser 用户 + */ + void addAccessToken(String accessToken, String refreshToken, OpenUser authUser); + + + /** + * 删除这个accessToken + * @param accessToken + */ + void removeAccessToken(String accessToken); + + /** + * 删除这个refreshToken + * @param refreshToken + */ + void removeRefreshToken(String refreshToken); + + /** + * 获取RefreshToken + * @param refreshToken + * @return 返回Token信息 + */ + RefreshToken getRefreshToken(String refreshToken); + + /** + * 验证auth code是否有效 + * + * @param authCode + * @return 无效返回false + */ + boolean checkAuthCode(String authCode); + + /** + * 根据auth code获取用户 + * + * @param authCode + * @return 返回用户 + */ + OpenUser getUserByAuthCode(String authCode); + + /** + * 根据access token获取用户名 + * + * @param accessToken + * token值 + * @return 返回用户 + */ + OpenUser getUserByAccessToken(String accessToken); + + /** + * 返回accessToken中追加的参数 + * @param user + * @return 返回追加的参数 + */ + Map
+ * 1、首先通过如http://localhost:8080/api/authorize?client_id=test&response_type=code&redirect_uri=http%3A%2F%2Flocalhost%3A8080%2Foauth2callback访问授权页面； + 2、该控制器首先检查clientId是否正确；如果错误将返回相应的错误信息； + 3、然后判断用户是否登录了，如果没有登录首先到登录页面登录； + 4、登录成功后生成相应的code即授权码，然后重定向到客户端地址，如http://localhost:8080/oauth2callback?code=6d250650831fea227749f49a5b49ccad；在重定向到的地址中会带上code参数（授权码），接着客户端可以根据授权码去换取accessToken。 + *+ * + * @param request req + * @param response resp + * @param authConfig 配置 + * @return 返回响应内容 + * @throws URISyntaxException + * @throws OAuthSystemException + */ + OAuthResponse authorize(HttpServletRequest request, HttpServletResponse response, OAuth2Config authConfig) + throws URISyntaxException, OAuthSystemException; + + + /** + * 通过code获取accessToken. + * @param fetchTokenParam + * @param authConfig 配置项 + * @return 返回响应内容 + * @throws URISyntaxException + * @throws OAuthSystemException + */ + FetchTokenResult accessToken(FetchTokenParam fetchTokenParam, OAuth2Config authConfig); +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OpenUser.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OpenUser.java new file mode 100644 index 00000000..5e7338b3 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/OpenUser.java @@ -0,0 +1,22 @@ +package com.gitee.sop.sopauth.auth; + +import java.io.Serializable; + +/** + * 如果要使用oauth2功能，自己的用户类需要实现这个对象 + * + * @author tanghc + */ +public interface OpenUser extends Serializable { + /** + * 返回用户id + * @return + */ + String getUserId(); + /** + * 返回用户名 + * + * @return 返回用户名 + */ + String getUsername(); +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/RefreshToken.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/RefreshToken.java new file mode 100644 index 00000000..acd04d54 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/RefreshToken.java @@ -0,0 +1,40 @@ +package com.gitee.sop.sopauth.auth; + +import java.io.Serializable; + +/** + * @author tanghc + */ +public class RefreshToken implements Serializable { + private static final long serialVersionUID = 1L; + + private String accessToken; + private OpenUser openUser; + + public RefreshToken(String accessToken, OpenUser openUser) { + super(); + this.accessToken = accessToken; + this.openUser = openUser; + } + + public RefreshToken() { + super(); + } + + public String getAccessToken() { + return accessToken; + } + + public void setAccessToken(String accessToken) { + this.accessToken = accessToken; + } + + public OpenUser getOpenUser() { + return openUser; + } + + public void setOpenUser(OpenUser openUser) { + this.openUser = openUser; + } + +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/TokenPair.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/TokenPair.java new file mode 100644 index 00000000..07e11214 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/TokenPair.java @@ -0,0 +1,29 @@ +package com.gitee.sop.sopauth.auth; + +/** + * 存放accessToken和refreshToken + * + * @author tanghc + * + */ +public class TokenPair { + private String accessToken; + private String refreshToken; + + public String getAccessToken() { + return accessToken; + } + + public void setAccessToken(String accessToken) { + this.accessToken = accessToken; + } + + public String getRefreshToken() { + return refreshToken; + } + + public void setRefreshToken(String refreshToken) { + this.refreshToken = refreshToken; + } + +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/exception/LoginErrorException.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/exception/LoginErrorException.java new file mode 100644 index 00000000..92e61d6a --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/exception/LoginErrorException.java @@ -0,0 +1,25 @@ +package com.gitee.sop.sopauth.auth.exception; + +/** + * @author tanghc + */ +public class LoginErrorException extends Exception { + private static final long serialVersionUID = -6721499454527023339L; + + public LoginErrorException() { + super(); + } + + public LoginErrorException(String message, Throwable cause) { + super(message, cause); + } + + public LoginErrorException(String message) { + super(message); + } + + public LoginErrorException(Throwable cause) { + super(cause); + } + +} \ No newline at end of file diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/impl/AppIdManagerImpl.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/impl/AppIdManagerImpl.java new file mode 100644 index 00000000..9c49954b --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/impl/AppIdManagerImpl.java @@ -0,0 +1,33 @@ +package com.gitee.sop.sopauth.auth.impl; + +import com.gitee.sop.sopauth.auth.AppIdManager; +import com.gitee.sop.sopauth.entity.IsvInfo; +import com.gitee.sop.sopauth.mapper.IsvInfoMapper; +import lombok.extern.slf4j.Slf4j; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.stereotype.Service; + +/** + * @author tanghc + */ +@Service +@Slf4j +public class AppIdManagerImpl implements AppIdManager { + + public static final int FORBIDDEN = 2; + @Autowired + private IsvInfoMapper isvInfoMapper; + + @Override + public boolean isValidAppId(String appId) { + IsvInfo isvInfo = isvInfoMapper.getByColumn("app_key", appId); + if (isvInfo == null) { + return false; + } + if (isvInfo.getStatus().intValue() == FORBIDDEN) { + log.error("appId已禁用:{}", appId); + return false; + } + return true; + } +} diff --git a/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/impl/OAuth2ManagerCache.java b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/impl/OAuth2ManagerCache.java new file mode 100644 index 00000000..102ed522 --- /dev/null +++ b/sop-example/sop-auth/src/main/java/com/gitee/sop/sopauth/auth/impl/OAuth2ManagerCache.java @@ -0,0 +1,135 @@ +package com.gitee.sop.sopauth.auth.impl; + +import com.gitee.fastmybatis.core.query.Query; +import com.gitee.sop.sopauth.auth.OAuth2Config; +import com.gitee.sop.sopauth.auth.OAuth2Manager; +import com.gitee.sop.sopauth.auth.OpenUser; +import com.gitee.sop.sopauth.auth.RefreshToken; +import com.gitee.sop.sopauth.auth.exception.LoginErrorException; +import com.gitee.sop.sopauth.entity.UserInfo; +import com.gitee.sop.sopauth.mapper.UserInfoMapper; +import com.google.common.cache.CacheBuilder; +import com.google.common.cache.CacheLoader; +import com.google.common.cache.LoadingCache; +import org.springframework.beans.factory.annotation.Autowired; +import org.springframework.stereotype.Service; +import org.springframework.util.StringUtils; + +import javax.servlet.http.HttpServletRequest; +import java.util.HashMap; +import java.util.Map; +import java.util.concurrent.TimeUnit; + +/** + * oauth2管理，默认谷歌缓存实现，跟redis实现只能用一个。正式环境推荐使用redis保存 + * @author tanghc + * + */ +@Service +public class OAuth2ManagerCache implements OAuth2Manager { + /** + * 应用授权的app_auth_code唯一的；app_auth_code使用一次后失效，一天（从生成app_auth_code开始的24小时）未被使用自动过期； + * app_auth_token永久有效。 + */ + private int codeTimeoutSeconds = OAuth2Config.getInstance().getCodeTimeoutSeconds(); + /** + * accessToken过期时间 + * -1 永久有效 + */ + private int accessTokenTimeoutSeconds = OAuth2Config.getInstance().getAccessTokenExpiresIn(); + + private int refreshTokenTimeoutSeconds = OAuth2Config.getInstance().getRefreshTokenExpiresIn(); + + private LoadingCache
+
+
+
\ No newline at end of file
diff --git a/sop-example/sop-auth/src/test/java/com/gitee/sop/sopauth/RefreshTokenTest.java b/sop-example/sop-auth/src/test/java/com/gitee/sop/sopauth/RefreshTokenTest.java
new file mode 100644
index 00000000..199f50b5
--- /dev/null
+++ b/sop-example/sop-auth/src/test/java/com/gitee/sop/sopauth/RefreshTokenTest.java
@@ -0,0 +1,40 @@
+package com.gitee.sop.sopauth;
+
+import com.gitee.sop.sdk.client.OpenClient;
+import com.gitee.sop.sdk.model.OpenAuthTokenAppModel;
+import com.gitee.sop.sdk.request.OpenAuthTokenAppRequest;
+import com.gitee.sop.sdk.response.OpenAuthTokenAppResponse;
+import junit.framework.TestCase;
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * @author tanghc
+ */
+@Slf4j
+public class RefreshTokenTest extends TestCase {
+ String url = "http://localhost:8081/api"; // zuul
+ String appId = "2019032617262200001";
+ // 支付宝私钥
+ String privateKey = "MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCXJv1pQFqWNA/++OYEV7WYXwexZK/J8LY1OWlP9X0T6wHFOvxNKRvMkJ5544SbgsJpVcvRDPrcxmhPbi/sAhdO4x2PiPKIz9Yni2OtYCCeaiE056B+e1O2jXoLeXbfi9fPivJZkxH/tb4xfLkH3bA8ZAQnQsoXA0SguykMRZntF0TndUfvDrLqwhlR8r5iRdZLB6F8o8qXH6UPDfNEnf/K8wX5T4EB1b8x8QJ7Ua4GcIUqeUxGHdQpzNbJdaQvoi06lgccmL+PHzminkFYON7alj1CjDN833j7QMHdPtS9l7B67fOU/p2LAAkPMtoVBfxQt9aFj7B8rEhGCz02iJIBAgMBAAECggEARqOuIpY0v6WtJBfmR3lGIOOokLrhfJrGTLF8CiZMQha+SRJ7/wOLPlsH9SbjPlopyViTXCuYwbzn2tdABigkBHYXxpDV6CJZjzmRZ+FY3S/0POlTFElGojYUJ3CooWiVfyUMhdg5vSuOq0oCny53woFrf32zPHYGiKdvU5Djku1onbDU0Lw8w+5tguuEZ76kZ/lUcccGy5978FFmYpzY/65RHCpvLiLqYyWTtaNT1aQ/9pw4jX9HO9NfdJ9gYFK8r/2f36ZE4hxluAfeOXQfRC/WhPmiw/ReUhxPznG/WgKaa/OaRtAx3inbQ+JuCND7uuKeRe4osP2jLPHPP6AUwQKBgQDUNu3BkLoKaimjGOjCTAwtp71g1oo+k5/uEInAo7lyEwpV0EuUMwLA/HCqUgR4K9pyYV+Oyb8d6f0+Hz0BMD92I2pqlXrD7xV2WzDvyXM3s63NvorRooKcyfd9i6ccMjAyTR2qfLkxv0hlbBbsPHz4BbU63xhTJp3Ghi0/ey/1HQKBgQC2VsgqC6ykfSidZUNLmQZe3J0p/Qf9VLkfrQ+xaHapOs6AzDU2H2osuysqXTLJHsGfrwVaTs00ER2z8ljTJPBUtNtOLrwNRlvgdnzyVAKHfOgDBGwJgiwpeE9voB1oAV/mXqSaUWNnuwlOIhvQEBwekqNyWvhLqC7nCAIhj3yvNQKBgQCqYbeec56LAhWP903Zwcj9VvG7sESqXUhIkUqoOkuIBTWFFIm54QLTA1tJxDQGb98heoCIWf5x/A3xNI98RsqNBX5JON6qNWjb7/dobitti3t99v/ptDp9u8JTMC7penoryLKK0Ty3bkan95Kn9SC42YxaSghzqkt+uvfVQgiNGQKBgGxU6P2aDAt6VNwWosHSe+d2WWXt8IZBhO9d6dn0f7ORvcjmCqNKTNGgrkewMZEuVcliueJquR47IROdY8qmwqcBAN7Vg2K7r7CPlTKAWTRYMJxCT1Hi5gwJb+CZF3+IeYqsJk2NF2s0w5WJTE70k1BSvQsfIzAIDz2yE1oPHvwVAoGAA6e+xQkVH4fMEph55RJIZ5goI4Y76BSvt2N5OKZKd4HtaV+eIhM3SDsVYRLIm9ZquJHMiZQGyUGnsvrKL6AAVNK7eQZCRDk9KQz+0GKOGqku0nOZjUbAu6A2/vtXAaAuFSFx1rUQVVjFulLexkXR3KcztL1Qu2k5pB6Si0K/uwQ=";
+
+ OpenClient openClient = new OpenClient(url, appId, privateKey);
+
+ /**
+ * 根据refreshToken换取token
+ */
+ public void testRefreshToken() {
+ OpenAuthTokenAppRequest request = new OpenAuthTokenAppRequest();
+ OpenAuthTokenAppModel model = new OpenAuthTokenAppModel();
+ model.setGrant_type("refresh_token");
+ model.setRefresh_token("856faf8d77d3b985c1073557ce6ea724");
+ request.setBizModel(model);
+
+ OpenAuthTokenAppResponse response = openClient.execute(request);
+ if (response.isSuccess()) {
+ // 成功拿到token，开发者在这里保存token信息
+ // 后续使用token进行接口访问
+ log.info("换取token成功，body:{}", response.getBody());
+ }
+ }
+
+}
diff --git a/sop-example/sop-auth/src/test/java/com/gitee/sop/sopauth/SopAuthApplicationTests.java b/sop-example/sop-auth/src/test/java/com/gitee/sop/sopauth/SopAuthApplicationTests.java
new file mode 100644
index 00000000..b5902b77
--- /dev/null
+++ b/sop-example/sop-auth/src/test/java/com/gitee/sop/sopauth/SopAuthApplicationTests.java
@@ -0,0 +1,16 @@
+package com.gitee.sop.sopauth;
+
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.test.context.junit4.SpringRunner;
+
+@RunWith(SpringRunner.class)
+@SpringBootTest
+public class SopAuthApplicationTests {
+
+ @Test
+ public void contextLoads() {
+ }
+
+}
diff --git a/sop-example/sop-book/sop-book-web/pom.xml b/sop-example/sop-book/sop-book-web/pom.xml
index aa01c9b5..868507db 100644
--- a/sop-example/sop-book/sop-book-web/pom.xml
+++ b/sop-example/sop-book/sop-book-web/pom.xml
@@ -23,7 +23,7 @@
+ * 如果使用app_auth_code换取token，则为authorization_code， + * 如果使用refresh_token换取新的token，则为refresh_token + */ + private String grant_type; + + /** + * 授权码.与refresh_token二选一，用户对应用授权后得到，即第一步中开发者获取到的app_auth_code值 + */ + private String code; + + /** + * 刷新令牌.与code二选一，可为空，刷新令牌时使用 + */ + private String refresh_token; +} diff --git a/sop-sdk/sdk-java/src/main/java/com/gitee/sop/sdk/request/OpenAuthTokenAppRequest.java b/sop-sdk/sdk-java/src/main/java/com/gitee/sop/sdk/request/OpenAuthTokenAppRequest.java new file mode 100644 index 00000000..0afcfb0b --- /dev/null +++ b/sop-sdk/sdk-java/src/main/java/com/gitee/sop/sdk/request/OpenAuthTokenAppRequest.java @@ -0,0 +1,13 @@ +package com.gitee.sop.sdk.request; + +import com.gitee.sop.sdk.response.OpenAuthTokenAppResponse; + +/** + * @author tanghc + */ +public class OpenAuthTokenAppRequest extends BaseRequest
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/sop-website/website-front/pages/doc/doc.html b/sop-website/website-front/pages/doc/doc.html
index 9e491b3d..3d9534ee 100644
--- a/sop-website/website-front/pages/doc/doc.html
+++ b/sop-website/website-front/pages/doc/doc.html
@@ -222,7 +222,7 @@
+
+ -
+
第三方应用授权
+ - + + 第三方应用授权 + + +
+ 
+
+
+
+
+
+第三方应用授权
+
+
+
+
+
+
+ 1、用户对开发者进行应用授权后，开发者可以帮助用户完成相应的业务逻辑。
+2、授权采用标准的OAuth 2.0流程。
+授权流程
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 第一步：应用授权URL拼装
+拼接规则:
+http://openauth.yourdomain.com/oauth2/appToAppAuth?app_id=2019032617262200001&redirect_uri=http%3a%2f%2flocalhost%3a8087%2foauth2callback
+参数说明：
+| 参数 | +参数名称 | +类型 | +必填 | +描述 | +范例 | +
|---|---|---|---|---|---|
| app_id | +开发者应用的AppId | +String | +是 | +开发者应用的AppId | +2015101400446982 | +
| redirect_uri | +回调页面 | +String | +是 | +参数需要UrlEncode | +http%3A%2F%2Fexample.com | +
第二步：获取code
+授权成功后，客户端会跳转至开发者定义的回调页面（即redirect_uri参数对应的url），在回调页面请求中会带上当次授权的授权码code和开发者的app_id，示例如下：
+http://devloper.domain.com/oauth2callback?app_id=2015101400446982&code=ca34ea491e7146cc87d25fca24c4cD11
+ +第三步：使用code换取app_auth_token
+接口名称：open.auth.token.app
+开发者通过code可以换取app_auth_token、授权用户的userId。
+注意:应用授权的code唯一，code使用一次后失效，有效期24小时； app_auth_token永久有效。
+请求参数说明
+| 参数 | +参数名称 | +类型 | +必填 | +描述 | +范例 | +
|---|---|---|---|---|---|
| grant_type | +授权类型 | +String | +是 | +如果使用code换取token，则为authorization_code，如果使用refresh_token换取新的token，则为refresh_token | +authorization_code | +
| code | +授权码 | +String | +否 | +与refresh_token二选一，用户对应用授权后得到，即第一步中开发者获取到的code值 | +bf67d8d5ed754af297f72cc482287X62 | +
| refresh_token | +刷新令牌 | +String | +否 | +与code二选一，可为空，刷新令牌时使用 | +201510BB0c409dd5758b4d939d4008a525463X62 | +
接口请求SDK示例
+
+ @GetMapping("oauth2callback")
+ @ResponseBody
+ public String callback(HttpServletRequest servletRequest, HttpServletResponse servletResponse) {
+ String app_id = servletRequest.getParameter("app_id");
+ String code = servletRequest.getParameter("code");
+
+ OpenAuthTokenAppRequest request = new OpenAuthTokenAppRequest();
+ OpenAuthTokenAppModel model = new OpenAuthTokenAppModel();
+ model.setCode(code);
+ model.setGrant_type("authorization_code");
+ request.setBizModel(model);
+
+ // 根据code获取token
+ OpenAuthTokenAppResponse response = openClient.execute(request);
+ if (response.isSuccess()) {
+ // 成功拿到token，开发者在这里保存token信息
+ // 后续使用token进行接口访问
+ log.info("授权成功，body:{}", response.getBody());
+ }
+ return response.getBody();
+ }
+
+ 同步响应参数说明
+| 参数 | +参数名称 | +类型 | +必填 | +描述 | +范例 | +
|---|---|---|---|---|---|
| app_auth_token | +用户授权令牌 | +String | +是 | +通过该令牌来帮助用户发起请求，完成业务 | +856faf8d77d3b985c1073557ce6ea724 | +
| user_id | +授权用户的ID | +String | +是 | +授权者id | +1 | +
| expires_in | +令牌有效期 | +Long | +是 | +负值表示永久有效 | +-1 | +
| re_expires_in | +刷新令牌有效期 | +Long | +是 | +负值表示永久有效 | +-3 | +
| app_refresh_token | +刷新令牌时使用 | +String | +是 | +刷新令牌后，我们会保证老的app_auth_token从刷新开始10分钟内可继续使用，请及时替换为最新token | +88e68196d2359667f0dc8136e6c86803 | +
同步响应结果示例
+{
+ "open_auth_token_app_response": {
+ "code": "10000",
+ "msg": "Success",
+ "app_auth_token": "88e68196d2359667f0dc8136e6c86803",
+ "app_refresh_token": "856faf8d77d3b985c1073557ce6ea724",
+ "expires_in": -1,
+ "re_expires_in": -3,
+ "user_id": "1"
+ },
+ "sign": "xxx"
+}
+刷新token
+
+OpenAuthTokenAppRequest request = new OpenAuthTokenAppRequest();
+OpenAuthTokenAppModel model = new OpenAuthTokenAppModel();
+model.setGrant_type("refresh_token");
+model.setRefresh_token("856faf8d77d3b985c1073557ce6ea724");
+request.setBizModel(model);
+
+OpenAuthTokenAppResponse response = openClient.execute(request);
+if (response.isSuccess()) {
+ // 成功拿到token，开发者在这里保存token信息
+ // 后续使用token进行接口访问
+ log.info("换取token成功，body:{}", response.getBody());
+}
+