获取AccessToken(个人身份登录)

package com.hoteam.sview.demo;

import cn.hutool.core.codec.Base64;
import cn.hutool.core.util.CharsetUtil;
import cn.hutool.core.util.StrUtil;
import cn.hutool.http.ContentType;
import cn.hutool.http.Header;
import cn.hutool.http.HttpRequest;
import cn.hutool.http.HttpResponse;
import cn.hutool.http.HttpStatus;
import cn.hutool.json.JSONObject;
import cn.hutool.json.JSONUtil;
import lombok.extern.slf4j.Slf4j;

/**
 * 获取 AccessToken（个人身份登录 / mobile 模式）
 * <p>
 * grant_type 固定为 mobile，mobile 字段使用 IntegrationId 进行登录，
 * 格式：INTEGRATION@{integrationId}，IntegrationId为该成员在外部平台的唯一ID，
 * 在导入用户时由集成方管理员指定。
 */
@Slf4j
public class OAuth2TokenIntegrationDemo {

    /** 鉴权接口地址，部署时替换为实际 gateway 地址 */
    private static final String TOKEN_URL = "http://your-host/auth/oauth2/token";

    /** 客户端 ID，可在系统中查看 */
    private static final String CLIENT_ID = "your_client_id";

    /** 客户端密钥，可在系统中查看 */
    private static final String CLIENT_SECRET = "your_client_secret";

    /**
     * 通过个人身份（IntegrationId）登录获取 AccessToken
     *
     * @param integrationId 集成业务方维护的 IntegrationId
     * @return access_token；获取失败返回 null
     */
    public static String getAccessTokenByIntegration(String integrationId) {
        if (StrUtil.isBlank(integrationId)) {
            log.warn("integrationId 不能为空");
            return null;
        }

        // mobile 字段拼接规则：INTEGRATION@{integrationId}
        String mobile = "INTEGRATION@" + integrationId;

        // Authorization: Basic base64(clientId:clientSecret)
        String basicAuth = "Basic " + Base64.encode(
                (CLIENT_ID + ":" + CLIENT_SECRET).getBytes(CharsetUtil.CHARSET_UTF_8));

        HttpRequest request = HttpRequest.post(TOKEN_URL)
                .header(Header.AUTHORIZATION, basicAuth)
                .header(Header.CONTENT_TYPE, ContentType.FORM_URLENCODED.getValue())
                .form("grant_type", "mobile")
                .form("mobile", mobile)
                .form("scope", "server")
                .timeout(10_000);

        // 添加公共 Header（tenant-id、deviceId、deviceModel、deviceType、lang 等）
        CommonHeaderUtil.withCommonHeaders(request);

        try (HttpResponse response = request.execute()) {
            int status = response.getStatus();
            String body = response.body();
            log.info("获取 AccessToken（个人身份登录）响应: status=[{}], body=[{}]", status, body);

            if (status == HttpStatus.HTTP_UNAUTHORIZED) {
                log.warn("认证失败，请检查 clientId / clientSecret / integrationId, body=[{}]", body);
                return null;
            }
            if (!response.isOk() || StrUtil.isBlank(body)) {
                log.warn("获取 AccessToken 响应异常: status=[{}], body=[{}]", status, body);
                return null;
            }

            JSONObject json = JSONUtil.parseObj(body);
            String accessToken = json.getStr("access_token");
            String refreshToken = json.getStr("refresh_token");
            Integer expiresIn = json.getInt("expires_in");

            if (StrUtil.isBlank(accessToken)) {
                log.warn("响应中未提取到 access_token, body=[{}]", body);
                return null;
            }

            log.info("登录成功 username=[{}], tenant_id=[{}], expires_in=[{}]s, refresh_token=[{}]",
                    username, tenantId, expiresIn, refreshToken);
            return accessToken;
        } catch (Exception e) {
            log.error("获取 OAuth2 Token（个人身份登录）接口异常", e);
            return null;
        }
    }
}