优化

server/test/demo/openapi-client/index.ts

@@ -0,0 +1,101 @@
+import { Issuer } from 'openid-client';
+import express from 'express';
+import axios from 'axios';
+
+const app = express();
+const port = 8080;
+
+const API = process.env.API || 'http://localhost:11001';
+const clientUrl = `http://localhost:${port}`;
+const clientId = process.env.ID || 'tc_649aa2179e97b8b3b2d1004f';
+const clientSecret = process.env.SECRET || '4Pt4lccOaztJROs-VhmQf8XBU89-z8rr';
+
+console.log('config:', {
+  API,
+  clientUrl,
+  clientId,
+});
+
+const request = axios.create({
+  baseURL: API,
+  transformRequest: [
+    function (data) {
+      let ret = '';
+      for (const it in data) {
+        ret +=
+          encodeURIComponent(it) + '=' + encodeURIComponent(data[it]) + '&';
+      }
+      ret = ret.substring(0, ret.lastIndexOf('&'));
+      return ret;
+    },
+  ],
+  headers: {
+    'content-type': 'application/x-www-form-urlencoded',
+  },
+});
+
+(async () => {
+  const tailchatIssuer = await Issuer.discover(
+    'https://tailchat-nightly.moonrailgun.com/open/'
+  );
+  console.log(
+    'Discovered issuer',
+    tailchatIssuer.issuer,
+    tailchatIssuer.metadata
+  );
+
+  const client = new tailchatIssuer.Client({
+    client_id: clientId,
+    client_secret: clientSecret,
+    redirect_uris: [`${clientUrl}/cb`],
+    response_types: ['code'],
+    // id_token_signed_response_alg (default "RS256")
+    // token_endpoint_auth_method (default "client_secret_basic")
+  });
+
+  app.get('/', (req, res) => {
+    const url = client.authorizationUrl({
+      scope: 'openid profile',
+      // response_mode: 'form_post',
+      nonce: Math.random().toString(),
+    });
+    res.send(`<a href="${url}">登录</a>`);
+  });
+
+  app.get('/cb', async (req, res, next) => {
+    try {
+      const { code } = req.query;
+
+      // 根据获取到的code获取授权码
+      const { data: tokenInfo } = await request.post('/open/token', {
+        // client_id: 'foo',
+        client_id: clientId,
+        client_secret: clientSecret,
+        redirect_uri: `${clientUrl}/cb`,
+        code,
+        grant_type: 'authorization_code',
+      });
+
+      console.log('tokenInfo', tokenInfo);
+
+      const { access_token, expires_in, id_token, scope, token_type } =
+        tokenInfo;
+
+      console.log('access_token', access_token);
+
+      const { data: userInfo } = await request.post('/open/me', {
+        access_token,
+      });
+
+      res.json({ userInfo });
+    } catch (err) {
+      console.error(err.response.data);
+      next(err);
+    }
+  });
+
+  app.listen(port, () => {
+    console.log(`请确保回调已经被注册在OIDC服务端的白名单中: ${clientUrl}/cb`);
+    console.log(`测试服务地址: http://127.0.0.1:${port}`);
+  });
+})();

server/test/demo/openapi-client/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "openapi-client",
+  "version": "1.0.0",
+  "description": "",
+  "private": true,
+  "main": "index.js",
+  "scripts": {
+    "start": "ts-node ./index.ts",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "",
+  "license": "MIT",
+  "dependencies": {
+    "axios": "^0.26.0",
+    "express": "^4.17.2",
+    "openid-client": "^5.1.5"
+  },
+  "devDependencies": {
+    "ts-node": "10.9.1"
+  }
+}