147 lines
4.3 KiB
Python
147 lines
4.3 KiB
Python
#!/usr/bin/env python3
|
||
"""
|
||
滴答清单 OAuth 完整认证流程（.env-only）
|
||
|
||
功能:
|
||
1. 启动本地回调服务器
|
||
2. 生成并显示授权URL
|
||
3. 接收授权码
|
||
4. 交换访问令牌
|
||
5. 测试API调用
|
||
6. 将令牌写入 .env（DIDA_ACCESS_TOKEN / DIDA_REFRESH_TOKEN）
|
||
|
||
使用:
|
||
python scripts/oauth_authenticate.py
|
||
python scripts/oauth_authenticate.py --port 38000
|
||
"""
|
||
|
||
import sys
|
||
import argparse
|
||
from pathlib import Path
|
||
|
||
# 添加项目根目录到路径
|
||
sys.path.insert(0, str(Path(__file__).parent.parent))
|
||
|
||
import os
|
||
import json
|
||
import dotenv
|
||
from utils.oauth_auth import DidaOAuthClient
|
||
|
||
|
||
def write_env_tokens(env_path: Path, access_token: str, refresh_token: str | None):
|
||
"""将令牌写入 .env（若存在则更新相关行）。"""
|
||
lines = []
|
||
if env_path.exists():
|
||
with open(env_path, "r", encoding="utf-8") as f:
|
||
lines = f.read().splitlines()
|
||
|
||
def upsert(key: str, value: str | None):
|
||
nonlocal lines
|
||
# 删除旧行
|
||
lines = [ln for ln in lines if not ln.startswith(f"{key}=")]
|
||
if value is not None:
|
||
lines.append(f"{key}={value}")
|
||
|
||
upsert("DIDA_ACCESS_TOKEN", access_token)
|
||
upsert("DIDA_REFRESH_TOKEN", refresh_token or "")
|
||
|
||
content = "\n".join(lines) + ("\n" if not content_endswith_newline(lines) else "")
|
||
with open(env_path, "w", encoding="utf-8") as f:
|
||
f.write(content)
|
||
|
||
|
||
def content_endswith_newline(lines: list[str]) -> bool:
|
||
if not lines:
|
||
return False
|
||
return lines[-1].endswith("\n")
|
||
|
||
|
||
def main():
|
||
# 加载 .env，确保 DIDA_CLIENT_ID/SECRET 可被读取
|
||
dotenv.load_dotenv()
|
||
parser = argparse.ArgumentParser(description="滴答清单OAuth认证（.env-only）")
|
||
|
||
parser.add_argument(
|
||
"--port",
|
||
type=int,
|
||
default=38000,
|
||
help="回调服务器端口"
|
||
)
|
||
|
||
args = parser.parse_args()
|
||
|
||
print("\n" + "="*70)
|
||
print("滴答清单OAuth 2.0 认证")
|
||
print("="*70 + "\n")
|
||
|
||
# 仅使用 .env 环境变量
|
||
client_id = os.environ.get("DIDA_CLIENT_ID")
|
||
client_secret = os.environ.get("DIDA_CLIENT_SECRET")
|
||
redirect_uri = os.environ.get("DIDA_REDIRECT_URI", f"http://localhost:{args.port}/callback")
|
||
if not client_id or not client_secret:
|
||
print("❌ 未检测到环境变量 DIDA_CLIENT_ID / DIDA_CLIENT_SECRET")
|
||
print("请在 .env 中设置以下变量后重试：\n")
|
||
example = {
|
||
"DIDA_CLIENT_ID": "YOUR_CLIENT_ID",
|
||
"DIDA_CLIENT_SECRET": "YOUR_CLIENT_SECRET",
|
||
"DIDA_REDIRECT_URI": f"http://localhost:{args.port}/callback"
|
||
}
|
||
print(json.dumps(example, indent=2))
|
||
sys.exit(1)
|
||
|
||
if not client_id or not client_secret:
|
||
print("❌ 配置文件缺少 client_id 或 client_secret")
|
||
sys.exit(1)
|
||
|
||
# 创建OAuth客户端
|
||
oauth_client = DidaOAuthClient(
|
||
client_id=client_id,
|
||
client_secret=client_secret,
|
||
redirect_uri=redirect_uri
|
||
)
|
||
|
||
# 执行授权流程
|
||
print("步骤1: 启动本地回调服务器")
|
||
print(f"端口: {args.port}\n")
|
||
|
||
success = oauth_client.authorize(auto_open_browser=False)
|
||
|
||
if success:
|
||
# 写入 .env（不会加入版本控制）
|
||
env_path = Path(".env")
|
||
write_env_tokens(env_path, oauth_client.access_token, oauth_client.refresh_token)
|
||
print(f"\n已写入 .env: DIDA_ACCESS_TOKEN / DIDA_REFRESH_TOKEN")
|
||
|
||
print("\n" + "="*70)
|
||
print("✅ OAuth认证成功!")
|
||
print("="*70)
|
||
print(f"Access Token: {oauth_client.access_token[:30]}...")
|
||
|
||
# 测试API
|
||
print("\n正在测试API...")
|
||
try:
|
||
import requests
|
||
headers = oauth_client.get_headers()
|
||
response = requests.get(
|
||
"https://api.dida365.com/open/v1/project",
|
||
headers=headers,
|
||
timeout=10
|
||
)
|
||
|
||
if response.status_code == 200:
|
||
projects = response.json()
|
||
print(f"✅ API测试成功! 找到 {len(projects)} 个项目\n")
|
||
else:
|
||
print(f"⚠️ API测试失败: HTTP {response.status_code}\n")
|
||
|
||
except Exception as e:
|
||
print(f"⚠️ API测试失败: {str(e)}\n")
|
||
|
||
else:
|
||
print("\n❌ OAuth认证失败")
|
||
sys.exit(1)
|
||
|
||
|
||
if __name__ == "__main__":
|
||
main()
|