diff --git a/others/oauth2.1-flow.md b/others/oauth2.1-flow.md
index 6859def..ea43548 100644
--- a/others/oauth2.1-flow.md
+++ b/others/oauth2.1-flow.md
@@ -146,17 +146,17 @@ Core-Class: OAuth2DeviceAuthorizationEndpointFilter
curl --location 'http://localhost:8080/oauth2/device_authorization' \
--header 'Content-Type: application/json' \
---form 'client_id="client11"' \
---form 'client_secret="secret22"' \
---form 'scope="openid"'
+--form 'client_id="6urNLgR6osk2E56ekp"' \
+--form 'client_secret="6urNLgR6osk2E56ekp"' \
+--form 'scope="openid profile"'
response
{
-"user_code": "VZRP-KNJR",
-"device_code": "GQ-K6n5kwLfu3XpDja-b3SlPbTfqYirFtO4JpWmniLUWCSRO2Suu09ipNUo1srUBwebN2PP9KqfIoVpW6DE94xNDkBS-ExAINFHnZzm4XvV5kHOXQwT2UTx5OQp6_7qz",
-"verification_uri_complete": "http://localhost:8080/oauth2/device_verification?user_code=VZRP-KNJR",
-"verification_uri": "http://localhost:8080/oauth2/device_verification",
+"user_code": "PCKJ-FWZS",
+"device_code": "ZPMq2sfyHPj_pJ78T6J4yGcsAAi_XbuBjtQz2NLxYWKDHbcqUhg2nFHe3Ynp3V1SyCOwYEoaz9lPvqt-oj0sXKxJDnC5usJmANVqMQ-8Qjpp1ROi9gljdQY2NO3YYvIo",
+"verification_uri_complete": "http://127.0.0.1:8080/oauth2/device_verification?user_code=PCKJ-FWZS",
+"verification_uri": "http://127.0.0.1:8080/oauth2/device_verification",
"expires_in": 300
}
@@ -179,11 +179,11 @@ curl --location 'http://localhost:8080/oauth2/token' \
response [200]
{
-"access_token": "eyJraWQiOiJteW9pZGMta2V5aWQiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyIiwiYXVkIjoiY2xpZW50MTEiLCJuYmYiOjE2OTI3ODU5MDEsInNjb3BlIjpbIm9wZW5pZCIsInByb2ZpbGUiXSwiaXNzIjoiaHR0cDovL2xvY2FsaG9zdDo4MDgxIiwiZXhwIjoxNjkyNzkzMTAxLCJpYXQiOjE2OTI3ODU5MDEsImp0aSI6ImRlOGExYjkwLWI1MzAtNDJmMi1iOWVlLTMwZDQ1ZTkxNDkwNiJ9.dkMOrM74R9eg7ozTtT8a0Tfe7TOjQ0gl0LZ-eG4eOyCUGuSGILzOrF_X7UQ4eaOAu43mRiJOJ81uqOcMgiMj6ijh4ihXumg0EnnWj79ShMX-4bCgy3d8_Ioq5E7CqykZkg0JIQNRm2Mv5Ei6PiPriBDCVjghCbz-UcPoT_66a-dIE3rO95LEQDCoFkWulq93HC9XfPbD2RwAWpRp1C3nD9GToNxkll9zeW8KZm46WSm-ihM6AG2VRj1dhIAOvodwPqGnc9gcY8KKT6tEEeuOSIMlWInQ4YG-pGM0n4h2OxhACZ8AfqQstdm2FP7o83ejVvBIreaaiA15BgqiqFx6IA",
-"refresh_token": "UCFNxUj4ytr241KzwJJgnMno1RfmoLs0GKVxNWPjW5VZ7d4U4YsDM7CwNgxRu7sKfDMFH2lcW_xcXA6CD7dztzUi41SaQZLkwfWU64F40al6U7x0sP3tfhgT005fS43g",
-"scope": "openid profile",
+"access_token": "QqPGuiF9c2HKYQEdxrs9E0WsRijEl_z9sINI6CFD5yMulXaZutLTktVtLP3zcr22XuYJOzWZMzOgvjWl2tqAoMo3S2MHBgxjPmx5gfr6DjeQPsW3fFPVc6pOa5Ll6u4S",
+"refresh_token": "7vtQtkU95tjt7nkaX8DZnDVntrgPYIoXB6_4WsV9FzMi-ppoPB_H5qmufi4EHqAuJPwdlxXYdDbVYoGudXd0iCPfmqT5B8CcW7zRsgaKQOHQlPw9Ju3wMGNSRk14YRWI",
+"scope": "profile",
"token_type": "Bearer",
-"expires_in": 7199
+"expires_in": 3599
}
or [400]
diff --git a/src/main/resources/static/api/SOS_API-3.0.0.html b/src/main/resources/static/api/SOS_API-3.0.0.html
index b8cb397..66df1c7 100644
--- a/src/main/resources/static/api/SOS_API-3.0.0.html
+++ b/src/main/resources/static/api/SOS_API-3.0.0.html
@@ -617,16 +617,16 @@
</ul>
</div>
- <div class="well well-sm" id="userInfoUnity">
- <h3>获取当前用户信息 (ROLE_UNITY)</h3>
+ <div class="well well-sm" id="deviceAuthor">
+ <h3>[device_code]流程 - 发起认证(/oauth2/device_authorization)</h3>
- <p class="text-muted">使用access_token获取用户信息, 需要有 ROLE_UNITY 权限</p>
+ <p class="text-muted">发起认证, 获取user_code, device_code等信息</p>
<ul class="list-group">
<li class="list-group-item">
<p>
- 请求URI: <code>/unity/user_info</code> <span
- class="label label-info">GET</span>
+ 请求URI: <code>/oauth2/device_authorization</code> <span
+ class="label label-warning">POST</span>
</p>
<div>
@@ -642,14 +642,31 @@
</thead>
<tbody>
<tr>
- <td colspan="4">无</td>
+ <td>client_id</td>
+ <td>{client_id}</td>
+ <td>是</td>
+ <td></td>
+ </tr>
+ <tr>
+ <td>client_secret</td>
+ <td>{client_secret}</td>
+ <td>是</td>
+ <td></td>
+ </tr>
+ <tr>
+ <td>scope</td>
+ <td>{scope}</td>
+ <td>是</td>
+ <td>如: openid profile</td>
</tr>
</tbody>
</table>
请求示例:
- <p>
- <code>http://localhost:8080/spring-oauth-server/unity/user_info?access_token=b12cace6-7ce4-4fa8-b127-cf537d15b213</code>
- </p>
+ <pre>curl --location 'http://localhost:8080/oauth2/device_authorization' \
+--header 'Content-Type: application/json' \
+--form 'client_id="6urNLgR6osk2E56ekp"' \
+--form 'client_secret="6urNLgR6osk2E56ekp"' \
+--form 'scope="openid profile"'</pre>
</div>
<br/>
@@ -658,39 +675,40 @@
<ul class="list-group">
<li class="list-group-item">
- <p>
+ <div>
正常 [200]<br/>
- <mark>
- {"guid":"55b713df1c6f423e842ad68668523c49","archived":false,"username":"unity","phone":"","email":"unity@wdcy.cc","privileges":["UNITY"]}
- </mark>
- </p>
+ <pre>{
+ "user_code": "PCKJ-FWZS",
+ "device_code": "ZPMq2sfyHPj_pJ78T6J4yGcsAAi_XbuBjtQz2NLxYWKDHbcqUhg2nFHe3Ynp3V1SyCOwYEoaz9lPvqt-oj0sXKxJDnC5usJmANVqMQ-8Qjpp1ROi9gljdQY2NO3YYvIo",
+ "verification_uri_complete": "http://127.0.0.1:8080/oauth2/device_verification?user_code=PCKJ-FWZS",
+ "verification_uri": "http://127.0.0.1:8080/oauth2/device_verification",
+ "expires_in": 300
+}</pre>
+ </div>
</li>
<li class="list-group-item">
- <p>
+ <div>
异常 [401]<br/>
- <mark>
- <oauth><error_description>Invalid access token:
- 2c612eb7-a22b-45f0-8b2e-cd6f9e3667722</error_description><error>invalid_token</error></oauth>
- </mark>
- </p>
+ <pre>{
+ "error": "invalid_client"
+}</pre>
+ </div>
</li>
</ul>
</li>
</ul>
</div>
- <div class="well well-sm" id="userInfoMobile">
- <p class="pull-right"><a href="">返回</a></p>
+ <div class="well well-sm" id="deviceToken">
+ <h3>[device_code]流程 - 获取token(/oauth2/token)</h3>
- <h3>获取当前用户信息 (ROLE_MOBILE)</h3>
-
- <p class="text-muted">使用access_token获取用户信息, 需要有 ROLE_MOBILE 权限</p>
+ <p class="text-muted">设备上轮循调用, 获取token</p>
<ul class="list-group">
<li class="list-group-item">
<p>
- 请求URI: <code>/m/user_info</code> <span
- class="label label-info">GET</span>
+ 请求URI: <code>/oauth2/token</code> <span
+ class="label label-warning">POST</span>
</p>
<div>
@@ -706,14 +724,38 @@
</thead>
<tbody>
<tr>
- <td colspan="4">无</td>
+ <td>client_id</td>
+ <td>{client_id}</td>
+ <td>是</td>
+ <td></td>
+ </tr>
+ <tr>
+ <td>client_secret</td>
+ <td>{client_secret}</td>
+ <td>是</td>
+ <td></td>
+ </tr>
+ <tr>
+ <td>grant_type</td>
+ <td>urn:ietf:params:oauth:grant-type:device_code</td>
+ <td>是</td>
+ <td>固定值</td>
+ </tr>
+ <tr>
+ <td>device_code</td>
+ <td>{device_code}</td>
+ <td>是</td>
+ <td>发起认证时返回的device_code值</td>
</tr>
</tbody>
</table>
请求示例:
- <p>
- <code>http://localhost:8080/spring-oauth-server/m/user_info?access_token=b12cace6-7ce4-4fa8-b127-cf537d15b213</code>
- </p>
+ <pre>curl --location 'http://localhost:8080/oauth2/token' \
+--header 'Content-Type: application/json' \
+--form 'client_id="6urNLgR6osk2E56ekp"' \
+--form 'client_secret="6urNLgR6osk2E56ekp"' \
+--form 'grant_type="urn:ietf:params:oauth:grant-type:device_code"' \
+--form 'device_code="iBv-_clBQtJR4w2eN8bgGBnwWgcoem6FCJlHgahhHNOq9oImcJAWLYKJ-jJOk207X19uE-glkArRLnhXgpm0C0pQcoxAZyoMmgznvWxOITQUYFYdAluBTo-fmDteKSgh"'</pre>
</div>
<br/>
@@ -722,21 +764,26 @@
<ul class="list-group">
<li class="list-group-item">
- <p>
+ <div>
正常 [200]<br/>
- <mark>
- {"guid":"612025cb3f964a64a48bbdf77e53c2c1","archived":false,"username":"mobile","phone":"","email":"mobile@wdcy.cc","privileges":["MOBILE"]}
- </mark>
- </p>
+ <pre>{
+ "access_token": "QqPGuiF9c2HKYQEdxrs9E0WsRijEl_z9sINI6CFD5yMulXaZutLTktVtLP3zcr22XuYJOzWZMzOgvjWl2tqAoMo3S2MHBgxjPmx5gfr6DjeQPsW3fFPVc6pOa5Ll6u4S",
+ "refresh_token": "7vtQtkU95tjt7nkaX8DZnDVntrgPYIoXB6_4WsV9FzMi-ppoPB_H5qmufi4EHqAuJPwdlxXYdDbVYoGudXd0iCPfmqT5B8CcW7zRsgaKQOHQlPw9Ju3wMGNSRk14YRWI",
+ "scope": "profile",
+ "token_type": "Bearer",
+ "expires_in": 3599
+}</pre>
+ </div>
</li>
<li class="list-group-item">
- <p>
- 异常 [401]<br/>
- <mark>
- <oauth><error_description>Invalid access token:
- 2c612eb7-a22b-45f0-8b2e-cd6f9e3667722</error_description><error>invalid_token</error></oauth>
- </mark>
- </p>
+ <div>
+ 异常 [400]<br/>
+ <pre>{
+ "error": "authorization_pending",
+ "error_uri": "https://datatracker.ietf.org/doc/html/rfc8628#section-3.5"
+}</pre>
+ <p class="help-block">说明: error=authorization_pending 表示授权正在进行中, 设备上需要轮循继续等待授权结果</p>
+ </div>
</li>
</ul>
</li>