refactor: 重构飞书授权代码，提取公共工具类

1. 创建 app/util/HttpClient.php
   - 公共 HTTP 请求类
   - httpGet() 和 httpPost() 方法
   - 支持自定义 headers 和 timeout
   - 统一错误处理和日志

2. 创建 app/util/FeishuUtil.php
   - 飞书授权工具类，可被其他业务模块复用
   - getAppAccessToken() - 获取应用访问令牌（带缓存）
   - getUserAccessToken() - 获取用户访问令牌
   - getUserInfo() - 获取用户信息
   - getCompleteUserInfo() - 一步获取完整用户信息
   - clearTokenCache() - 清除 token 缓存

3. 重构 app/service/FeishuService.php
   - 使用新的工具类
   - 移除重复的 HTTP 请求方法
   - 保持向后兼容

飞书授权流程：
1. app_access_token (应用级令牌)
2. user_access_token (用户级令牌，需要 app_access_token)
3. 用户信息 (需要 user_access_token)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend/app/service/FeishuService.php

@@ -5,24 +5,21 @@ namespace app\service;
 use app\model\Company;
 use app\model\CompanyFeishuApp;
 use app\model\User;
-use support\Db;
+use app\util\FeishuUtil;
+use app\util\HttpClient;
+use Exception;
 
 class FeishuService
 {
-    private ?string $accessToken = null;
     private ?int $companyId = null;
     private ?int $appId = null;
 
-    // 简单的内存缓存（生产环境应使用 Redis）
-    private static array $tokenCache = [];
-
     /**
      * 设置当前操作的公司
      */
     public function setCompany(int $companyId): self
     {
         $this->companyId = $companyId;
-        $this->accessToken = null;
         return $this;
     }
 
@@ -32,7 +29,6 @@ class FeishuService
     public function setApp(int $appId): self
     {
         $this->appId = $appId;
-        $this->accessToken = null;
         return $this;
     }
 
@@ -52,7 +48,7 @@ class FeishuService
         $app = CompanyFeishuApp::find($appId);
 
         if (!$app || $app->status !== 1) {
-            throw new \Exception('飞书应用配置不存在');
+            throw new Exception('飞书应用配置不存在');
         }
 
         return $app->toArray();
@@ -70,7 +66,7 @@ class FeishuService
             ->first();
 
         if (!$app) {
-            throw new \Exception('未配置飞书应用');
+            throw new Exception('未配置飞书应用');
         }
 
         return $app->toArray();
@@ -82,7 +78,7 @@ class FeishuService
     private function getAppConfig(): array
     {
         if (!$this->companyId) {
-            throw new \Exception('未设置公司ID');
+            throw new Exception('未设置公司ID');
         }
 
         if ($this->appId) {
@@ -93,44 +89,21 @@ class FeishuService
     }
 
     /**
-     * 获取飞书 access_token
+     * 获取当前应用ID
+     */
+    private function getAppId(): int
+    {
+        $app = $this->getAppConfig();
+        return $app['id'];
+    }
+
+    /**
+     * 获取飞书 access_token（保留用于向后兼容）
+     * @deprecated 建议直接使用 FeishuUtil::getAppAccessToken()
      */
     public function getAccessToken(): string
     {
-        if ($this->accessToken) {
-            return $this->accessToken;
-        }
-
-        $app = $this->getAppConfig();
-        $cacheKey = "feishu:access_token:{$app['id']}";
-
-        // 从内存缓存获取
-        if (isset(self::$tokenCache[$cacheKey]) && self::$tokenCache[$cacheKey]['expire'] > time()) {
-            $this->accessToken = self::$tokenCache[$cacheKey]['token'];
-            return $this->accessToken;
-        }
-
-        // 请求新的 token
-        $response = $this->httpPost('https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal', [
-            'app_id' => $app['app_id'],
-            'app_secret' => $app['app_secret'],
-        ]);
-
-        if ($response['code'] !== 0) {
-            throw new \Exception('获取飞书 token 失败: ' . ($response['msg'] ?? '未知错误'));
-        }
-
-        $token = $response['tenant_access_token'];
-        $expire = $response['expire'] ?? 7200;
-
-        // 缓存 token（提前5分钟过期）
-        self::$tokenCache[$cacheKey] = [
-            'token' => $token,
-            'expire' => time() + $expire - 300,
-        ];
-
-        $this->accessToken = $token;
-        return $token;
+        return FeishuUtil::getAppAccessToken($this->getAppId());
     }
 
     /**
@@ -139,31 +112,12 @@ class FeishuService
     public function getUserInfo(string $authCode): array
     {
         $app = $this->getAppConfig();
+        $appId = $app['id'];
 
-        // 使用 passport 端点获取 user_access_token
-        $response = $this->httpPost('https://passport.feishu.cn/suite/passport/oauth/token', [
-            'grant_type' => 'authorization_code',
-            'client_id' => $app['app_id'],
-            'client_secret' => $app['app_secret'],
-            'code' => $authCode,
-        ]);
+        error_log("🔑 使用应用ID: {$appId}, app_id: {$app['app_id']}");
 
-        if (!isset($response['access_token'])) {
-            throw new \Exception('获取 user_access_token 失败: ' . ($response['error_description'] ?? '未知错误'));
-        }
-
-        $userAccessToken = $response['access_token'];
-
-        // 使用 user_access_token 获取用户信息
-        $userInfo = $this->httpGet('https://passport.feishu.cn/suite/passport/oauth/userinfo', [
-            'access_token' => $userAccessToken,
-        ]);
-
-        if (!isset($userInfo['data'])) {
-            throw new \Exception('获取用户信息失败');
-        }
-
-        return $userInfo['data'];
+        // 使用 FeishuUtil 获取完整用户信息
+        return FeishuUtil::getCompleteUserInfo($authCode, $appId);
     }
 
     /**
@@ -178,7 +132,7 @@ class FeishuService
         $email = $feishuData['email'] ?? null;
 
         if (!$unionId) {
-            throw new \Exception('缺少 union_id');
+            throw new Exception('缺少 union_id');
         }
 
         // 查找或创建用户
@@ -257,7 +211,7 @@ class FeishuService
             ];
 
             // 发送消息
-            $response = $this->httpPost(
+            $response = HttpClient::httpPost(
                 "https://open.feishu.cn/open-apis/message/v4/send_messages",
                 [
                     'receive_id_type' => 'user_id',
@@ -271,79 +225,10 @@ class FeishuService
             );
 
             return ($response['code'] ?? -1) === 0;
-        } catch (\Exception $e) {
+        } catch (Exception $e) {
             // 记录错误但不中断流程
             error_log('发送飞书消息失败: ' . $e->getMessage());
             return false;
         }
     }
-
-    /**
-     * HTTP POST 请求
-     */
-    private function httpPost(string $url, array $data, array $headers = []): array
-    {
-        $ch = curl_init();
-
-        curl_setopt($ch, CURLOPT_URL, $url);
-        curl_setopt($ch, CURLOPT_POST, true);
-        curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
-        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-
-        $defaultHeaders = [
-            'Content-Type: application/json',
-        ];
-
-        curl_setopt($ch, CURLOPT_HTTPHEADER, array_merge($defaultHeaders, $headers));
-
-        $response = curl_exec($ch);
-        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-        // curl_close($ch); // 不再需要，PHP 8.5+ 自动关闭
-
-        if ($httpCode !== 200) {
-            throw new \Exception("HTTP 请求失败: {$httpCode}");
-        }
-
-        $result = json_decode($response, true);
-
-        if (json_last_error() !== JSON_ERROR_NONE) {
-            throw new \Exception('JSON 解析失败');
-        }
-
-        return $result;
-    }
-
-    /**
-     * HTTP GET 请求
-     */
-    private function httpGet(string $url, array $params = []): array
-    {
-        if (!empty($params)) {
-            $url .= '?' . http_build_query($params);
-        }
-
-        $ch = curl_init();
-
-        curl_setopt($ch, CURLOPT_URL, $url);
-        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
-        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
-        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
-
-        $response = curl_exec($ch);
-        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
-
-        if ($httpCode !== 200) {
-            throw new \Exception("HTTP 请求失败: {$httpCode}");
-        }
-
-        $result = json_decode($response, true);
-
-        if (json_last_error() !== JSON_ERROR_NONE) {
-            throw new \Exception('JSON 解析失败');
-        }
-
-        return $result;
-    }
 }