OAuth 2.0 开发文档

{
  "issuer": "",
  "authorization_endpoint": "/oauth/authorize",
  "token_endpoint": "/oauth/token",
  "userinfo_endpoint": "/oauth/userinfo",
  "scopes_supported": [
    "read:profile",
    "read:email",
    "read:user",
    "read:qq",
    "read:avatar",
    "read:level",
    "write:profile"
  ],
  "response_types_supported": ["code"],
  "grant_types_supported": [
    "authorization_code",
    "refresh_token"
  ],
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post"
  ]
}

const express = require('express');
const app = express();

const CLIENT_ID = 'your_client_id';
const CLIENT_SECRET = 'your_client_secret';
const REDIRECT_URI = 'http://localhost:3000/callback';
const AUTH_URL = '';

// 第一步：重定向到授权页面
app.get('/login', (req, res) => {
  const params = new URLSearchParams({
    client_id: CLIENT_ID,
    redirect_uri: REDIRECT_URI,
    response_type: 'code',
    scope: 'read:user read:email read:avatar',
    state: crypto.randomUUID(),
  });
  res.redirect(`${AUTH_URL}/oauth/authorize?${params}`);
});

// 第二步：处理授权回调
app.get('/callback', async (req, res) => {
  const { code, state } = req.query;

  // 使用授权码换取令牌
  const tokenRes = await fetch(`${AUTH_URL}/oauth/token`, {
    method: 'POST',
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    body: new URLSearchParams({
      grant_type: 'authorization_code',
      code,
      redirect_uri: REDIRECT_URI,
      client_id: CLIENT_ID,
      client_secret: CLIENT_SECRET,
    }),
  });
  const tokens = await tokenRes.json();

  // 获取用户信息
  const userRes = await fetch(`${AUTH_URL}/oauth/userinfo`, {
    headers: { Authorization: `Bearer ${tokens.access_token}` },
  });
  const user = await userRes.json();

  res.json({ user, tokens });
});

app.listen(3000);

{
  "error": "invalid_grant",
  "error_description": "授权码已过期或无效"
}