// 测试OAuth 2.0认证流程 // 1. 创建OAuth客户端 POST http://localhost:5001/api/v1/oauth/clients Content-Type: application/json { "clientName": "TestClient", "redirectUris": ["http://localhost:3000/callback"], "scopes": ["read", "write"] } ### // 2. 获取授权码(在浏览器中访问以下URL) // http://localhost:5001/api/v1/oauth/authorize?response_type=code&client_id=test_client&redirect_uri=http://localhost:3000/callback&scope=read&state=xyz ### // 3. 使用授权码获取访问令牌 POST http://localhost:5001/api/v1/oauth/token Content-Type: application/x-www-form-urlencoded grant_type=authorization_code&code=YOUR_AUTHORIZATION_CODE&redirect_uri=http://localhost:3000/callback&client_id=test_client&client_secret=YOUR_CLIENT_SECRET ### // 4. 使用访问令牌访问受保护的API GET http://localhost:5001/api/v1/mails Authorization: Bearer YOUR_ACCESS_TOKEN ### // 5. 刷新访问令牌 POST http://localhost:5001/api/v1/oauth/token Content-Type: application/x-www-form-urlencoded grant_type=refresh_token&refresh_token=YOUR_REFRESH_TOKEN&client_id=test_client&client_secret=YOUR_CLIENT_SECRET