OAuth 2.0 SSO 演示

代码示例

// 1. 重定向到授权页面
const authUrl = new URL('/api/oauth/authorize');
authUrl.searchParams.set('client_id', 'client_52783a9e481f5fcefab4630ab4d0f9a1');
authUrl.searchParams.set('redirect_uri', 'http://localhost:3001/callback');
authUrl.searchParams.set('scope', 'read');
authUrl.searchParams.set('state', 'kwgfoa');

window.location.href = authUrl.toString();

// 2. 在回调页面交换令牌
const tokenResponse = await fetch('/api/oauth/token', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({
        grant_type: 'authorization_code',
        code: code, // 从回调URL获取
        redirect_uri: 'http://localhost:3001/callback',
        client_id: 'client_52783a9e481f5fcefab4630ab4d0f9a1',
        client_secret: 'your_client_secret'
    })
});

const tokens = await tokenResponse.json();

// 3. 使用访问令牌获取用户信息
const userResponse = await fetch('/api/oauth/userinfo', {
    headers: { 'Authorization': `Bearer ${tokens.access_token}` }
});

const user = await userResponse.json();

API 端点