update SOS_API-3.0.0.html

others/oauth2.1-flow.md

@@ -146,17 +146,17 @@ Core-Class: OAuth2DeviceAuthorizationEndpointFilter
 
 curl --location 'http://localhost:8080/oauth2/device_authorization' \
 --header 'Content-Type: application/json' \
---form 'client_id="client11"' \
+--form 'client_id="6urNLgR6osk2E56ekp"' \
---form 'client_secret="secret22"' \
+--form 'client_secret="6urNLgR6osk2E56ekp"' \
---form 'scope="openid"'
+--form 'scope="openid profile"'
 
 response
 
 {
-"user_code": "VZRP-KNJR",
+"user_code": "PCKJ-FWZS",
-"device_code": "GQ-K6n5kwLfu3XpDja-b3SlPbTfqYirFtO4JpWmniLUWCSRO2Suu09ipNUo1srUBwebN2PP9KqfIoVpW6DE94xNDkBS-ExAINFHnZzm4XvV5kHOXQwT2UTx5OQp6_7qz",
+"device_code": "ZPMq2sfyHPj_pJ78T6J4yGcsAAi_XbuBjtQz2NLxYWKDHbcqUhg2nFHe3Ynp3V1SyCOwYEoaz9lPvqt-oj0sXKxJDnC5usJmANVqMQ-8Qjpp1ROi9gljdQY2NO3YYvIo",
-"verification_uri_complete": "http://localhost:8080/oauth2/device_verification?user_code=VZRP-KNJR",
+"verification_uri_complete": "http://127.0.0.1:8080/oauth2/device_verification?user_code=PCKJ-FWZS",
-"verification_uri": "http://localhost:8080/oauth2/device_verification",
+"verification_uri": "http://127.0.0.1:8080/oauth2/device_verification",
 "expires_in": 300
 }
 
@@ -179,11 +179,11 @@ curl --location 'http://localhost:8080/oauth2/token' \
 response [200]
 
 {
-"access_token": "eyJraWQiOiJteW9pZGMta2V5aWQiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJ1c2VyIiwiYXVkIjoiY2xpZW50MTEiLCJuYmYiOjE2OTI3ODU5MDEsInNjb3BlIjpbIm9wZW5pZCIsInByb2ZpbGUiXSwiaXNzIjoiaHR0cDovL2xvY2FsaG9zdDo4MDgxIiwiZXhwIjoxNjkyNzkzMTAxLCJpYXQiOjE2OTI3ODU5MDEsImp0aSI6ImRlOGExYjkwLWI1MzAtNDJmMi1iOWVlLTMwZDQ1ZTkxNDkwNiJ9.dkMOrM74R9eg7ozTtT8a0Tfe7TOjQ0gl0LZ-eG4eOyCUGuSGILzOrF_X7UQ4eaOAu43mRiJOJ81uqOcMgiMj6ijh4ihXumg0EnnWj79ShMX-4bCgy3d8_Ioq5E7CqykZkg0JIQNRm2Mv5Ei6PiPriBDCVjghCbz-UcPoT_66a-dIE3rO95LEQDCoFkWulq93HC9XfPbD2RwAWpRp1C3nD9GToNxkll9zeW8KZm46WSm-ihM6AG2VRj1dhIAOvodwPqGnc9gcY8KKT6tEEeuOSIMlWInQ4YG-pGM0n4h2OxhACZ8AfqQstdm2FP7o83ejVvBIreaaiA15BgqiqFx6IA",
+"access_token": "QqPGuiF9c2HKYQEdxrs9E0WsRijEl_z9sINI6CFD5yMulXaZutLTktVtLP3zcr22XuYJOzWZMzOgvjWl2tqAoMo3S2MHBgxjPmx5gfr6DjeQPsW3fFPVc6pOa5Ll6u4S",
-"refresh_token": "UCFNxUj4ytr241KzwJJgnMno1RfmoLs0GKVxNWPjW5VZ7d4U4YsDM7CwNgxRu7sKfDMFH2lcW_xcXA6CD7dztzUi41SaQZLkwfWU64F40al6U7x0sP3tfhgT005fS43g",
+"refresh_token": "7vtQtkU95tjt7nkaX8DZnDVntrgPYIoXB6_4WsV9FzMi-ppoPB_H5qmufi4EHqAuJPwdlxXYdDbVYoGudXd0iCPfmqT5B8CcW7zRsgaKQOHQlPw9Ju3wMGNSRk14YRWI",
-"scope": "openid profile",
+"scope": "profile",
 "token_type": "Bearer",
-"expires_in": 7199
+"expires_in": 3599
 }
 
 or [400]

src/main/resources/static/api/SOS_API-3.0.0.html

@@ -617,16 +617,16 @@
             </ul>
         </div>
 
-        <div class="well well-sm" id="userInfoUnity">
+        <div class="well well-sm" id="deviceAuthor">
-            <h3>获取当前用户信息 (ROLE_UNITY)</h3>
+            <h3>[device_code]流程 - 发起认证(/oauth2/device_authorization)</h3>
 
-            <p class="text-muted">使用access_token获取用户信息, 需要有 ROLE_UNITY 权限</p>
+            <p class="text-muted">发起认证, 获取user_code, device_code等信息</p>
 
             <ul class="list-group">
                 <li class="list-group-item">
                     <p>
-                        请求URI: <code>/unity/user_info</code> <span
+                        请求URI: <code>/oauth2/device_authorization</code> <span
-                            class="label label-info">GET</span>
+                            class="label label-warning">POST</span>
                     </p>
 
                     <div>
@@ -642,14 +642,31 @@
                             </thead>
                             <tbody>
                             <tr>
-                                <td colspan="4">无</td>
+                                <td>client_id</td>
+                                <td>{client_id}</td>
+                                <td>是</td>
+                                <td></td>
+                            </tr>
+                            <tr>
+                                <td>client_secret</td>
+                                <td>{client_secret}</td>
+                                <td>是</td>
+                                <td></td>
+                            </tr>
+                            <tr>
+                                <td>scope</td>
+                                <td>{scope}</td>
+                                <td>是</td>
+                                <td>如: openid profile</td>
                             </tr>
                             </tbody>
                         </table>
                         请求示例:
-                        <p>
+                        <pre>curl --location 'http://localhost:8080/oauth2/device_authorization' \
-                            <code>http://localhost:8080/spring-oauth-server/unity/user_info?access_token=b12cace6-7ce4-4fa8-b127-cf537d15b213</code>
+--header 'Content-Type: application/json' \
-                        </p>
+--form 'client_id="6urNLgR6osk2E56ekp"' \
+--form 'client_secret="6urNLgR6osk2E56ekp"' \
+--form 'scope="openid profile"'</pre>
 
                     </div>
                     <br/>
@@ -658,39 +675,40 @@
 
                     <ul class="list-group">
                         <li class="list-group-item">
-                            <p>
+                            <div>
                                 正常 [200]<br/>
-                                <mark>
+                                <pre>{
-                                    {"guid":"55b713df1c6f423e842ad68668523c49","archived":false,"username":"unity","phone":"","email":"unity@wdcy.cc","privileges":["UNITY"]}
+    "user_code": "PCKJ-FWZS",
-                                </mark>
+    "device_code": "ZPMq2sfyHPj_pJ78T6J4yGcsAAi_XbuBjtQz2NLxYWKDHbcqUhg2nFHe3Ynp3V1SyCOwYEoaz9lPvqt-oj0sXKxJDnC5usJmANVqMQ-8Qjpp1ROi9gljdQY2NO3YYvIo",
-                            </p>
+    "verification_uri_complete": "http://127.0.0.1:8080/oauth2/device_verification?user_code=PCKJ-FWZS",
+    "verification_uri": "http://127.0.0.1:8080/oauth2/device_verification",
+    "expires_in": 300
+}</pre>
+                            </div>
                         </li>
                         <li class="list-group-item">
-                            <p>
+                            <div>
                                 异常 [401]<br/>
-                                <mark>
+                                <pre>{
-                                    &lt;oauth&gt;&lt;error_description&gt;Invalid access token:
+    "error": "invalid_client"
-                                    2c612eb7-a22b-45f0-8b2e-cd6f9e3667722&lt;/error_description&gt;&lt;error&gt;invalid_token&lt;/error&gt;&lt;/oauth&gt;
+}</pre>
-                                </mark>
+                            </div>
-                            </p>
                         </li>
                     </ul>
                 </li>
             </ul>
         </div>
 
-        <div class="well well-sm" id="userInfoMobile">
+        <div class="well well-sm" id="deviceToken">
-            <p class="pull-right"><a href="">返回</a></p>
+            <h3>[device_code]流程 - 获取token(/oauth2/token)</h3>
-
-            <h3>获取当前用户信息 (ROLE_MOBILE)</h3>
 
-            <p class="text-muted">使用access_token获取用户信息, 需要有 ROLE_MOBILE 权限</p>
+            <p class="text-muted">设备上轮循调用, 获取token</p>
 
             <ul class="list-group">
                 <li class="list-group-item">
                     <p>
-                        请求URI: <code>/m/user_info</code> <span
+                        请求URI: <code>/oauth2/token</code> <span
-                            class="label label-info">GET</span>
+                            class="label label-warning">POST</span>
                     </p>
 
                     <div>
@@ -706,14 +724,38 @@
                             </thead>
                             <tbody>
                             <tr>
-                                <td colspan="4">无</td>
+                                <td>client_id</td>
+                                <td>{client_id}</td>
+                                <td>是</td>
+                                <td></td>
+                            </tr>
+                            <tr>
+                                <td>client_secret</td>
+                                <td>{client_secret}</td>
+                                <td>是</td>
+                                <td></td>
+                            </tr>
+                            <tr>
+                                <td>grant_type</td>
+                                <td>urn:ietf:params:oauth:grant-type:device_code</td>
+                                <td>是</td>
+                                <td>固定值</td>
+                            </tr>
+                            <tr>
+                                <td>device_code</td>
+                                <td>{device_code}</td>
+                                <td>是</td>
+                                <td>发起认证时返回的device_code值</td>
                             </tr>
                             </tbody>
                         </table>
                         请求示例:
-                        <p>
+                        <pre>curl --location 'http://localhost:8080/oauth2/token' \
-                            <code>http://localhost:8080/spring-oauth-server/m/user_info?access_token=b12cace6-7ce4-4fa8-b127-cf537d15b213</code>
+--header 'Content-Type: application/json' \
-                        </p>
+--form 'client_id="6urNLgR6osk2E56ekp"' \
+--form 'client_secret="6urNLgR6osk2E56ekp"' \
+--form 'grant_type="urn:ietf:params:oauth:grant-type:device_code"' \
+--form 'device_code="iBv-_clBQtJR4w2eN8bgGBnwWgcoem6FCJlHgahhHNOq9oImcJAWLYKJ-jJOk207X19uE-glkArRLnhXgpm0C0pQcoxAZyoMmgznvWxOITQUYFYdAluBTo-fmDteKSgh"'</pre>
 
                     </div>
                     <br/>
@@ -722,21 +764,26 @@
 
                     <ul class="list-group">
                         <li class="list-group-item">
-                            <p>
+                            <div>
                                 正常 [200]<br/>
-                                <mark>
+                                <pre>{
-                                    {"guid":"612025cb3f964a64a48bbdf77e53c2c1","archived":false,"username":"mobile","phone":"","email":"mobile@wdcy.cc","privileges":["MOBILE"]}
+    "access_token": "QqPGuiF9c2HKYQEdxrs9E0WsRijEl_z9sINI6CFD5yMulXaZutLTktVtLP3zcr22XuYJOzWZMzOgvjWl2tqAoMo3S2MHBgxjPmx5gfr6DjeQPsW3fFPVc6pOa5Ll6u4S",
-                                </mark>
+    "refresh_token": "7vtQtkU95tjt7nkaX8DZnDVntrgPYIoXB6_4WsV9FzMi-ppoPB_H5qmufi4EHqAuJPwdlxXYdDbVYoGudXd0iCPfmqT5B8CcW7zRsgaKQOHQlPw9Ju3wMGNSRk14YRWI",
-                            </p>
+    "scope": "profile",
+    "token_type": "Bearer",
+    "expires_in": 3599
+}</pre>
+                            </div>
                         </li>
                         <li class="list-group-item">
-                            <p>
+                            <div>
-                                异常 [401]<br/>
+                                异常 [400]<br/>
-                                <mark>
+                                <pre>{
-                                    &lt;oauth&gt;&lt;error_description&gt;Invalid access token:
+    "error": "authorization_pending",
-                                    2c612eb7-a22b-45f0-8b2e-cd6f9e3667722&lt;/error_description&gt;&lt;error&gt;invalid_token&lt;/error&gt;&lt;/oauth&gt;
+    "error_uri": "https://datatracker.ietf.org/doc/html/rfc8628#section-3.5"
-                                </mark>
+}</pre>
-                            </p>
+                                <p class="help-block">说明: error=authorization_pending 表示授权正在进行中, 设备上需要轮循继续等待授权结果</p>
+                            </div>
                         </li>
                     </ul>
                 </li>