219 lines
7.6 KiB
JavaScript
219 lines
7.6 KiB
JavaScript
const axios = require('axios');
|
||
|
||
const BASE_URL = 'http://localhost:3000';
|
||
const AUTH_URL = `${BASE_URL}/api/auth`;
|
||
const OAUTH_URL = `${BASE_URL}/api/oauth`;
|
||
|
||
// 测试数据
|
||
const testUser = {
|
||
username: `oauthuser${Date.now()}`,
|
||
email: `oauthuser${Date.now()}@example.com`,
|
||
password: 'TestPassword123'
|
||
};
|
||
|
||
const testOAuthClient = {
|
||
name: '测试OAuth客户端',
|
||
description: '用于测试的OAuth客户端',
|
||
redirect_uris: ['http://localhost:3001/callback'],
|
||
scopes: ['read', 'write']
|
||
};
|
||
|
||
let authToken = '';
|
||
let clientId = '';
|
||
let clientSecret = '';
|
||
let authCode = '';
|
||
let accessToken = '';
|
||
let refreshToken = '';
|
||
|
||
async function testOAuthFlow() {
|
||
console.log('🚀 开始测试OAuth功能...\n');
|
||
|
||
try {
|
||
// 1. 注册测试用户
|
||
console.log('1. 注册测试用户...');
|
||
const registerResponse = await axios.post(`${AUTH_URL}/register`, testUser);
|
||
if (registerResponse.data.success) {
|
||
console.log('✅ 用户注册成功:', registerResponse.data.message);
|
||
} else {
|
||
console.log('❌ 用户注册失败:', registerResponse.data.message);
|
||
return;
|
||
}
|
||
|
||
// 2. 登录获取JWT令牌
|
||
console.log('\n2. 登录获取JWT令牌...');
|
||
const loginResponse = await axios.post(`${AUTH_URL}/login`, {
|
||
username: testUser.username,
|
||
password: testUser.password
|
||
});
|
||
|
||
if (loginResponse.data.success) {
|
||
authToken = loginResponse.data.data.token;
|
||
console.log('✅ 登录成功，获取到JWT令牌');
|
||
} else {
|
||
console.log('❌ 登录失败:', loginResponse.data.message);
|
||
return;
|
||
}
|
||
|
||
// 3. 创建OAuth客户端
|
||
console.log('\n3. 创建OAuth客户端...');
|
||
const clientResponse = await axios.post(`${OAUTH_URL}/clients`, testOAuthClient, {
|
||
headers: { Authorization: `Bearer ${authToken}` }
|
||
});
|
||
|
||
if (clientResponse.data.success) {
|
||
const clientData = clientResponse.data.data;
|
||
clientId = clientData.client_id;
|
||
clientSecret = clientData.client_secret;
|
||
console.log('✅ OAuth客户端创建成功:', clientResponse.data.message);
|
||
console.log(`Client ID: ${clientId}`);
|
||
console.log(`Client Secret: ${clientSecret.substring(0, 16)}...`);
|
||
} else {
|
||
console.log('❌ OAuth客户端创建失败:', clientResponse.data.message);
|
||
return;
|
||
}
|
||
|
||
// 4. 测试授权端点
|
||
console.log('\n4. 测试授权端点...');
|
||
const authorizeUrl = `${OAUTH_URL}/authorize?response_type=code&client_id=${clientId}&redirect_uri=${encodeURIComponent('http://localhost:3001/callback')}&scope=read write&state=test_state_123`;
|
||
|
||
const authorizeResponse = await axios.get(authorizeUrl, {
|
||
headers: { Authorization: `Bearer ${authToken}` }
|
||
});
|
||
|
||
if (authorizeResponse.data.success) {
|
||
authCode = authorizeResponse.data.data.code;
|
||
console.log('✅ 授权成功:', authorizeResponse.data.message);
|
||
console.log(`授权码: ${authCode.substring(0, 20)}...`);
|
||
} else {
|
||
console.log('❌ 授权失败:', authorizeResponse.data.message);
|
||
return;
|
||
}
|
||
|
||
// 5. 测试令牌交换
|
||
console.log('\n5. 测试令牌交换...');
|
||
const tokenResponse = await axios.post(`${OAUTH_URL}/token`, {
|
||
grant_type: 'authorization_code',
|
||
client_id: clientId,
|
||
client_secret: clientSecret,
|
||
code: authCode,
|
||
redirect_uri: 'http://localhost:3001/callback'
|
||
});
|
||
|
||
if (tokenResponse.data.success) {
|
||
const tokenData = tokenResponse.data.data;
|
||
accessToken = tokenData.access_token;
|
||
refreshToken = tokenData.refresh_token;
|
||
console.log('✅ 令牌交换成功');
|
||
console.log(`访问令牌: ${accessToken.substring(0, 20)}...`);
|
||
console.log(`刷新令牌: ${refreshToken.substring(0, 20)}...`);
|
||
} else {
|
||
console.log('❌ 令牌交换失败:', tokenResponse.data.message);
|
||
return;
|
||
}
|
||
|
||
// 6. 测试用户信息端点
|
||
console.log('\n6. 测试用户信息端点...');
|
||
const userInfoResponse = await axios.get(`${OAUTH_URL}/userinfo`, {
|
||
headers: { Authorization: `Bearer ${accessToken}` }
|
||
});
|
||
|
||
if (userInfoResponse.data.success) {
|
||
console.log('✅ 用户信息获取成功');
|
||
console.log('用户信息:', userInfoResponse.data.data);
|
||
} else {
|
||
console.log('❌ 用户信息获取失败:', userInfoResponse.data.message);
|
||
}
|
||
|
||
// 7. 测试令牌信息端点
|
||
console.log('\n7. 测试令牌信息端点...');
|
||
const tokenInfoResponse = await axios.get(`${OAUTH_URL}/tokeninfo`, {
|
||
headers: { Authorization: `Bearer ${accessToken}` }
|
||
});
|
||
|
||
if (tokenInfoResponse.data.success) {
|
||
console.log('✅ 令牌信息获取成功');
|
||
console.log('令牌信息:', tokenInfoResponse.data.data);
|
||
} else {
|
||
console.log('❌ 令牌信息获取失败:', tokenInfoResponse.data.message);
|
||
}
|
||
|
||
// 8. 测试刷新令牌
|
||
console.log('\n8. 测试刷新令牌...');
|
||
const refreshResponse = await axios.post(`${OAUTH_URL}/token`, {
|
||
grant_type: 'refresh_token',
|
||
client_id: clientId,
|
||
client_secret: clientSecret,
|
||
refresh_token: refreshToken
|
||
});
|
||
|
||
if (refreshResponse.data.success) {
|
||
const newTokenData = refreshResponse.data.data;
|
||
accessToken = newTokenData.access_token;
|
||
refreshToken = newTokenData.refresh_token;
|
||
console.log('✅ 刷新令牌成功');
|
||
console.log(`新访问令牌: ${accessToken.substring(0, 20)}...`);
|
||
} else {
|
||
console.log('❌ 刷新令牌失败:', refreshResponse.data.message);
|
||
}
|
||
|
||
// 9. 测试撤销令牌
|
||
console.log('\n9. 测试撤销令牌...');
|
||
const revokeResponse = await axios.post(`${OAUTH_URL}/revoke`, {
|
||
token: accessToken,
|
||
client_id: clientId,
|
||
client_secret: clientSecret
|
||
});
|
||
|
||
if (revokeResponse.data.success) {
|
||
console.log('✅ 令牌撤销成功');
|
||
} else {
|
||
console.log('❌ 令牌撤销失败:', revokeResponse.data.message);
|
||
}
|
||
|
||
// 10. 测试OAuth客户端管理
|
||
console.log('\n10. 测试OAuth客户端管理...');
|
||
const clientsResponse = await axios.get(`${OAUTH_URL}/clients`, {
|
||
headers: { Authorization: `Bearer ${authToken}` }
|
||
});
|
||
|
||
if (clientsResponse.data.success) {
|
||
console.log('✅ 获取客户端列表成功');
|
||
console.log(`客户端数量: ${clientsResponse.data.data.clients.length}`);
|
||
} else {
|
||
console.log('❌ 获取客户端列表失败:', clientsResponse.data.message);
|
||
}
|
||
|
||
// 11. 测试获取客户端密钥
|
||
console.log('\n11. 测试获取客户端密钥...');
|
||
const secretResponse = await axios.get(`${OAUTH_URL}/clients/${clientId}/secret`, {
|
||
headers: { Authorization: `Bearer ${authToken}` }
|
||
});
|
||
|
||
if (secretResponse.data.success) {
|
||
console.log('✅ 获取客户端密钥成功');
|
||
console.log(`密钥: ${secretResponse.data.data.client_secret.substring(0, 16)}...`);
|
||
} else {
|
||
console.log('❌ 获取客户端密钥失败:', secretResponse.data.message);
|
||
}
|
||
|
||
// 12. 测试OAuth发现端点
|
||
console.log('\n12. 测试OAuth发现端点...');
|
||
const discoveryResponse = await axios.get(`${BASE_URL}/.well-known/oauth-authorization-server`);
|
||
|
||
if (discoveryResponse.status === 200) {
|
||
console.log('✅ OAuth发现端点正常');
|
||
console.log('授权端点:', discoveryResponse.data.authorization_endpoint);
|
||
console.log('令牌端点:', discoveryResponse.data.token_endpoint);
|
||
} else {
|
||
console.log('❌ OAuth发现端点异常');
|
||
}
|
||
|
||
console.log('\n🎉 OAuth完整流程测试通过！');
|
||
|
||
} catch (error) {
|
||
console.error('❌ OAuth测试失败:', error.response?.data || error.message);
|
||
}
|
||
}
|
||
|
||
// 运行测试
|
||
testOAuthFlow(); |