37 lines
1.1 KiB
HTTP
37 lines
1.1 KiB
HTTP
// 测试OAuth 2.0认证流程
|
||
// 1. 创建OAuth客户端
|
||
POST http://localhost:5001/api/v1/oauth/clients
|
||
Content-Type: application/json
|
||
|
||
{
|
||
"clientName": "TestClient",
|
||
"redirectUris": ["http://localhost:3000/callback"],
|
||
"scopes": ["read", "write"]
|
||
}
|
||
|
||
###
|
||
|
||
// 2. 获取授权码（在浏览器中访问以下URL）
|
||
// http://localhost:5001/api/v1/oauth/authorize?response_type=code&client_id=test_client&redirect_uri=http://localhost:3000/callback&scope=read&state=xyz
|
||
|
||
###
|
||
|
||
// 3. 使用授权码获取访问令牌
|
||
POST http://localhost:5001/api/v1/oauth/token
|
||
Content-Type: application/x-www-form-urlencoded
|
||
|
||
grant_type=authorization_code&code=YOUR_AUTHORIZATION_CODE&redirect_uri=http://localhost:3000/callback&client_id=test_client&client_secret=YOUR_CLIENT_SECRET
|
||
|
||
###
|
||
|
||
// 4. 使用访问令牌访问受保护的API
|
||
GET http://localhost:5001/api/v1/mails
|
||
Authorization: Bearer YOUR_ACCESS_TOKEN
|
||
|
||
###
|
||
|
||
// 5. 刷新访问令牌
|
||
POST http://localhost:5001/api/v1/oauth/token
|
||
Content-Type: application/x-www-form-urlencoded
|
||
|
||
grant_type=refresh_token&refresh_token=YOUR_REFRESH_TOKEN&client_id=test_client&client_secret=YOUR_CLIENT_SECRET |