refactor: 重构飞书授权代码，提取公共工具类
1. 创建 app/util/HttpClient.php - 公共 HTTP 请求类 - httpGet() 和 httpPost() 方法 - 支持自定义 headers 和 timeout - 统一错误处理和日志 2. 创建 app/util/FeishuUtil.php - 飞书授权工具类，可被其他业务模块复用 - getAppAccessToken() - 获取应用访问令牌（带缓存） - getUserAccessToken() - 获取用户访问令牌 - getUserInfo() - 获取用户信息 - getCompleteUserInfo() - 一步获取完整用户信息 - clearTokenCache() - 清除 token 缓存 3. 重构 app/service/FeishuService.php - 使用新的工具类 - 移除重复的 HTTP 请求方法 - 保持向后兼容 飞书授权流程： 1. app_access_token (应用级令牌) 2. user_access_token (用户级令牌，需要 app_access_token) 3. 用户信息 (需要 user_access_token) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
root
@@ -0,0 +1,200 @@
|
||||
<?php
|
||||
|
||||
namespace app\util;
|
||||
|
||||
use app\model\CompanyFeishuApp;
|
||||
use Exception;
|
||||
|
||||
/**
|
||||
* 飞书授权工具类
|
||||
* 处理飞书 OAuth 相关操作
|
||||
*/
|
||||
class FeishuUtil
|
||||
{
|
||||
// Token 缓存（生产环境应使用 Redis）
|
||||
private static array $tokenCache = [];
|
||||
|
||||
// 飞书 API 端点
|
||||
private const string APP_ACCESS_TOKEN_URL = 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal';
|
||||
private const string USER_ACCESS_TOKEN_URL = 'https://open.feishu.cn/open-apis/authen/v1/oidc/access_token';
|
||||
private const string USER_INFO_URL = 'https://open.feishu.cn/open-apis/authen/v1/user_info';
|
||||
|
||||
/**
|
||||
* 获取 app_access_token
|
||||
*
|
||||
* @param int $appId 飞书应用ID
|
||||
* @return string app_access_token
|
||||
* @throws Exception
|
||||
*/
|
||||
public static function getAppAccessToken(int $appId): string
|
||||
{
|
||||
$cacheKey = "feishu:app_access_token:{$appId}";
|
||||
|
||||
// 从缓存获取
|
||||
if (isset(self::$tokenCache[$cacheKey]) && self::$tokenCache[$cacheKey]['expire'] > time()) {
|
||||
return self::$tokenCache[$cacheKey]['token'];
|
||||
}
|
||||
|
||||
// 获取应用配置
|
||||
$app = CompanyFeishuApp::find($appId);
|
||||
|
||||
if (!$app || $app->status !== 1) {
|
||||
throw new Exception('飞书应用配置不存在或已禁用');
|
||||
}
|
||||
|
||||
// 请求新的 token
|
||||
try {
|
||||
$response = HttpClient::httpPost(self::APP_ACCESS_TOKEN_URL, [
|
||||
'app_id' => $app->app_id,
|
||||
'app_secret' => $app->app_secret,
|
||||
]);
|
||||
|
||||
if ($response['code'] !== 0) {
|
||||
throw new Exception('获取 app_access_token 失败: ' . ($response['msg'] ?? '未知错误'));
|
||||
}
|
||||
|
||||
$token = $response['tenant_access_token'];
|
||||
$expire = $response['expire'] ?? 7200;
|
||||
|
||||
// 缓存 token（提前5分钟过期）
|
||||
self::$tokenCache[$cacheKey] = [
|
||||
'token' => $token,
|
||||
'expire' => time() + $expire - 300,
|
||||
];
|
||||
|
||||
error_log("✅ 获取 app_access_token 成功: " . substr($token, 0, 30) . "...");
|
||||
|
||||
return $token;
|
||||
} catch (Exception $e) {
|
||||
error_log("❌ 获取 app_access_token 失败: " . $e->getMessage());
|
||||
throw $e;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 使用 app_access_token 获取 user_access_token
|
||||
*
|
||||
* @param string $code 飞书授权码
|
||||
* @param int $appId 飞书应用ID
|
||||
* @return string user_access_token
|
||||
* @throws Exception
|
||||
*/
|
||||
public static function getUserAccessToken(string $code, int $appId): string
|
||||
{
|
||||
$appAccessToken = self::getAppAccessToken($appId);
|
||||
$app = CompanyFeishuApp::find($appId);
|
||||
|
||||
if (!$app || $app->status !== 1) {
|
||||
throw new Exception('飞书应用配置不存在或已禁用');
|
||||
}
|
||||
|
||||
error_log("🔍 获取 user_access_token, auth_code: " . substr($code, 0, 10) . "...");
|
||||
error_log("🔍 使用 app_id: " . $app->app_id);
|
||||
error_log("👑 app_access_token: " . substr($appAccessToken, 0, 30) . "...");
|
||||
|
||||
try {
|
||||
$response = HttpClient::httpPost(
|
||||
self::USER_ACCESS_TOKEN_URL,
|
||||
[
|
||||
'grant_type' => 'authorization_code',
|
||||
'client_id' => $app->app_id,
|
||||
'client_secret' => $app->app_secret,
|
||||
'code' => $code,
|
||||
],
|
||||
[
|
||||
'Authorization: Bearer ' . $appAccessToken,
|
||||
]
|
||||
);
|
||||
|
||||
error_log("📝 获取 user_access_token 响应: " . json_encode($response));
|
||||
|
||||
if ($response['code'] !== 0) {
|
||||
throw new Exception('获取 user_access_token 失败: ' . ($response['msg'] ?? '未知错误'));
|
||||
}
|
||||
|
||||
if (!isset($response['data']['access_token'])) {
|
||||
throw new Exception('响应中缺少 access_token: ' . json_encode($response));
|
||||
}
|
||||
|
||||
$userAccessToken = $response['data']['access_token'];
|
||||
error_log("✅ 获取 user_access_token 成功: " . substr($userAccessToken, 0, 20) . "...");
|
||||
|
||||
return $userAccessToken;
|
||||
} catch (Exception $e) {
|
||||
error_log("❌ 获取 user_access_token 失败: " . $e->getMessage());
|
||||
throw $e;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 使用 user_access_token 获取用户信息
|
||||
*
|
||||
* @param string $userAccessToken user_access_token
|
||||
* @return array 用户信息
|
||||
* @throws Exception
|
||||
*/
|
||||
public static function getUserInfo(string $userAccessToken): array
|
||||
{
|
||||
error_log("🔍 获取用户信息, user_access_token: " . substr($userAccessToken, 0, 20) . "...");
|
||||
|
||||
try {
|
||||
$response = HttpClient::httpGet(
|
||||
self::USER_INFO_URL,
|
||||
[],
|
||||
[
|
||||
'Authorization: Bearer ' . $userAccessToken,
|
||||
]
|
||||
);
|
||||
|
||||
error_log("📝 获取用户信息响应: " . json_encode($response));
|
||||
|
||||
if ($response['code'] !== 0) {
|
||||
throw new Exception('获取用户信息失败: ' . ($response['msg'] ?? '未知错误'));
|
||||
}
|
||||
|
||||
$userInfo = $response['data'] ?? [];
|
||||
|
||||
error_log("✅ 获取用户信息成功: " . ($userInfo['name'] ?? '未知'));
|
||||
|
||||
return $userInfo;
|
||||
} catch (Exception $e) {
|
||||
error_log("❌ 获取用户信息失败: " . $e->getMessage());
|
||||
throw $e;
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* 清除指定应用的 token 缓存
|
||||
*
|
||||
* @param int $appId 飞书应用ID
|
||||
*/
|
||||
public static function clearTokenCache(int $appId): void
|
||||
{
|
||||
$cacheKey = "feishu:app_access_token:{$appId}";
|
||||
unset(self::$tokenCache[$cacheKey]);
|
||||
error_log("🗑️ 已清除应用 {$appId} 的 token 缓存");
|
||||
}
|
||||
|
||||
/**
|
||||
* 清除所有 token 缓存
|
||||
*/
|
||||
public static function clearAllTokenCache(): void
|
||||
{
|
||||
self::$tokenCache = [];
|
||||
error_log("🗑️ 已清除所有 token 缓存");
|
||||
}
|
||||
|
||||
/**
|
||||
* 获取完整的用户信息（一步完成整个授权流程）
|
||||
*
|
||||
* @param string $code 飞书授权码
|
||||
* @param int $appId 飞书应用ID
|
||||
* @return array 用户信息
|
||||
* @throws Exception
|
||||
*/
|
||||
public static function getCompleteUserInfo(string $code, int $appId): array
|
||||
{
|
||||
$userAccessToken = self::getUserAccessToken($code, $appId);
|
||||
return self::getUserInfo($userAccessToken);
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,165 @@
|
||||
<?php
|
||||
|
||||
namespace app\util;
|
||||
|
||||
use Exception;
|
||||
|
||||
/**
|
||||
* HTTP 请求工具类
|
||||
* 提供简单的 HTTP GET 和 POST 请求方法
|
||||
*/
|
||||
class HttpClient
|
||||
{
|
||||
private static int $defaultTimeout = 30;
|
||||
|
||||
/**
|
||||
* 发送 HTTP GET 请求
|
||||
*
|
||||
* @param string $url 请求URL
|
||||
* @param array $params 查询参数
|
||||
* @param array $headers 请求头
|
||||
* @param int $timeout 超时时间（秒）
|
||||
* @return array 响应数据（JSON解码后的数组）
|
||||
* @throws Exception
|
||||
*/
|
||||
public static function httpGet(
|
||||
string $url,
|
||||
array $params = [],
|
||||
array $headers = [],
|
||||
int $timeout = 0
|
||||
): array {
|
||||
if (!empty($params)) {
|
||||
$url .= '?' . http_build_query($params);
|
||||
}
|
||||
|
||||
$ch = curl_init();
|
||||
|
||||
curl_setopt($ch, CURLOPT_URL, $url);
|
||||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||||
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ?: self::$defaultTimeout);
|
||||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
|
||||
|
||||
if (!empty($headers)) {
|
||||
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);
|
||||
}
|
||||
|
||||
$response = curl_exec($ch);
|
||||
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
||||
$error = curl_error($ch);
|
||||
|
||||
curl_close($ch);
|
||||
|
||||
self::logRequest('GET', $url, [], $response, $httpCode);
|
||||
|
||||
if ($error) {
|
||||
throw new Exception("HTTP GET 请求失败: {$error}");
|
||||
}
|
||||
|
||||
if ($httpCode !== 200) {
|
||||
throw new Exception("HTTP GET 请求失败: HTTP {$httpCode}, Response: {$response}");
|
||||
}
|
||||
|
||||
$result = json_decode($response, true);
|
||||
|
||||
if (json_last_error() !== JSON_ERROR_NONE) {
|
||||
throw new Exception('JSON 解析失败: ' . $response);
|
||||
}
|
||||
|
||||
return $result;
|
||||
}
|
||||
|
||||
/**
|
||||
* 发送 HTTP POST 请求
|
||||
*
|
||||
* @param string $url 请求URL
|
||||
* @param array $data 请求数据
|
||||
* @param array $headers 请求头
|
||||
* @param int $timeout 超时时间（秒）
|
||||
* @return array 响应数据（JSON解码后的数组）
|
||||
* @throws Exception
|
||||
*/
|
||||
public static function httpPost(
|
||||
string $url,
|
||||
array $data = [],
|
||||
array $headers = [],
|
||||
int $timeout = 0
|
||||
): array {
|
||||
$ch = curl_init();
|
||||
|
||||
curl_setopt($ch, CURLOPT_URL, $url);
|
||||
curl_setopt($ch, CURLOPT_POST, true);
|
||||
curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode($data));
|
||||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||||
curl_setopt($ch, CURLOPT_TIMEOUT, $timeout ?: self::$defaultTimeout);
|
||||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
|
||||
|
||||
$defaultHeaders = [
|
||||
'Content-Type: application/json',
|
||||
];
|
||||
|
||||
curl_setopt($ch, CURLOPT_HTTPHEADER, array_merge($defaultHeaders, $headers));
|
||||
|
||||
$response = curl_exec($ch);
|
||||
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
|
||||
$error = curl_error($ch);
|
||||
|
||||
curl_close($ch);
|
||||
|
||||
self::logRequest('POST', $url, $data, $response, $httpCode);
|
||||
|
||||
if ($error) {
|
||||
throw new Exception("HTTP POST 请求失败: {$error}");
|
||||
}
|
||||
|
||||
if ($httpCode !== 200) {
|
||||
throw new Exception("HTTP POST 请求失败: HTTP {$httpCode}, Response: {$response}");
|
||||
}
|
||||
|
||||
$result = json_decode($response, true);
|
||||
|
||||
if (json_last_error() !== JSON_ERROR_NONE) {
|
||||
throw new Exception('JSON 解析失败: ' . $response);
|
||||
}
|
||||
|
||||
return $result;
|
||||
}
|
||||
|
||||
/**
|
||||
* 记录请求日志
|
||||
*
|
||||
* @param string $method 请求方法
|
||||
* @param string $url 请求URL
|
||||
* @param array $requestData 请求数据
|
||||
* @param string $response 响应数据
|
||||
* @param int $httpCode HTTP状态码
|
||||
*/
|
||||
private static function logRequest(
|
||||
string $method,
|
||||
string $url,
|
||||
array $requestData,
|
||||
string $response,
|
||||
int $httpCode
|
||||
): void {
|
||||
$emoji = $method === 'GET' ? '🌐' : '📤';
|
||||
$methodLower = strtolower($method);
|
||||
$logMessage = "{$emoji} HTTP {$method} {$url} -> HTTP {$httpCode}";
|
||||
|
||||
error_log($logMessage);
|
||||
|
||||
if (!empty($requestData)) {
|
||||
error_log("📤 Request: " . json_encode($requestData));
|
||||
}
|
||||
|
||||
error_log("📥 Response: {$response}");
|
||||
}
|
||||
|
||||
/**
|
||||
* 设置默认超时时间
|
||||
*
|
||||
* @param int $timeout 超时时间（秒）
|
||||
*/
|
||||
public static function setDefaultTimeout(int $timeout): void
|
||||
{
|
||||
self::$defaultTimeout = $timeout;
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user