feishu-mcp 0.0.15 → 0.0.17

package/dist/server.js

@@ -3,6 +3,7 @@ import { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';
 import { Logger } from './utils/logger.js';
 import { SSEConnectionManager } from './manager/sseConnectionManager.js';
 import { FeishuMcp } from './mcp/feishuMcp.js';
+import { callback, getTokenByParams } from './services/callbackService.js';
 export class FeishuMcpServer {
     constructor() {
         Object.defineProperty(this, "connectionManager", {
@@ -62,6 +63,25 @@ export class FeishuMcpServer {
             }
             await transport.handlePostMessage(req, res);
         });
+        app.get('/callback', callback);
+        app.get('/getToken', async (req, res) => {
+            const { client_id, client_secret, token_type } = req.query;
+            if (!client_id || !client_secret) {
+                res.status(400).json({ code: 400, msg: '缺少 client_id 或 client_secret' });
+                return;
+            }
+            try {
+                const tokenResult = await getTokenByParams({
+                    client_id: client_id,
+                    client_secret: client_secret,
+                    token_type: token_type
+                });
+                res.json({ code: 0, msg: 'success', data: tokenResult });
+            }
+            catch (e) {
+                res.status(500).json({ code: 500, msg: e.message || '获取token失败' });
+            }
+        });
         app.listen(port, () => {
             Logger.info(`HTTP server listening on port ${port}`);
             Logger.info(`SSE endpoint available at http://localhost:${port}/sse`);

package/dist/services/baseService.js

@@ -21,16 +21,6 @@ export class BaseApiService {
             value: null
         });
     }
-    /**
-     * 检查访问令牌是否过期
-     * @returns 是否过期
-     */
-    isTokenExpired() {
-        if (!this.accessToken || !this.tokenExpireTime)
-            return true;
-        // 预留5分钟的缓冲时间
-        return Date.now() >= (this.tokenExpireTime - 5 * 60 * 1000);
-    }
     /**
      * 处理API错误
      * @param error 错误对象

package/dist/services/callbackService.js

@@ -0,0 +1,80 @@
+import { AuthService } from './feishuAuthService.js';
+import { Config } from '../utils/config.js';
+import { CacheManager } from '../utils/cache.js';
+import { renderFeishuAuthResultHtml } from '../utils/document.js';
+// 通用响应码
+const CODE = {
+    SUCCESS: 0,
+    PARAM_ERROR: 400,
+    CUSTOM: 500,
+};
+// 封装响应方法
+function sendSuccess(res, data) {
+    const html = renderFeishuAuthResultHtml(data);
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.status(200).send(html);
+}
+function sendFail(res, msg, code = CODE.CUSTOM) {
+    const html = renderFeishuAuthResultHtml({ error: msg, code });
+    res.setHeader('Content-Type', 'text/html; charset=utf-8');
+    res.status(200).send(html);
+}
+const authService = new AuthService();
+const config = Config.getInstance();
+export async function callback(req, res) {
+    const code = req.query.code;
+    const state = req.query.state;
+    console.log(`[callback] query:`, req.query);
+    if (!code) {
+        console.log('[callback] 缺少code参数');
+        return sendFail(res, '缺少code参数', CODE.PARAM_ERROR);
+    }
+    // 校验state（clientKey）
+    const client_id = config.feishu.appId;
+    const client_secret = config.feishu.appSecret;
+    const expectedClientKey = await CacheManager.getClientKey(client_id, client_secret);
+    if (state !== expectedClientKey) {
+        console.log('[callback] state(clientKey)不匹配');
+        return sendFail(res, 'state(clientKey)不匹配', CODE.PARAM_ERROR);
+    }
+    const redirect_uri = `http://localhost:${config.server.port}/callback`;
+    const session = req.session;
+    const code_verifier = session?.code_verifier || undefined;
+    try {
+        // 获取 user_access_token
+        const tokenResp = await authService.getUserTokenByCode({
+            client_id,
+            client_secret,
+            code,
+            redirect_uri,
+            code_verifier
+        });
+        const data = (tokenResp && typeof tokenResp === 'object') ? tokenResp : undefined;
+        console.log('[callback] feishu response:', data);
+        if (!data || data.code !== 0 || !data.access_token) {
+            return sendFail(res, `获取 access_token 失败，飞书返回: ${JSON.stringify(tokenResp)}`, CODE.CUSTOM);
+        }
+        // 获取用户信息
+        const access_token = data.access_token;
+        let userInfo = null;
+        if (access_token) {
+            userInfo = await authService.getUserInfo(access_token);
+            console.log('[callback] feishu userInfo:', userInfo);
+        }
+        return sendSuccess(res, { ...data, userInfo });
+    }
+    catch (e) {
+        console.error('[callback] 请求飞书token或用户信息失败:', e);
+        return sendFail(res, `请求飞书token或用户信息失败: ${e}`, CODE.CUSTOM);
+    }
+}
+export async function getTokenByParams({ client_id, client_secret, token_type }) {
+    const authService = new AuthService();
+    if (client_id)
+        authService.config.feishu.appId = client_id;
+    if (client_secret)
+        authService.config.feishu.appSecret = client_secret;
+    if (token_type)
+        authService.config.feishu.authType = token_type === 'user' ? 'user' : 'tenant';
+    return await authService.getToken();
+}

package/dist/services/feishuApiService.js

@@ -76,41 +76,25 @@ export class FeishuApiService extends BaseApiService {
             Logger.debug('使用缓存的访问令牌');
             return cachedToken;
         }
-        try {
-            const requestData = {
-                app_id: this.config.feishu.appId,
-                app_secret: this.config.feishu.appSecret,
-            };
-            Logger.info('开始获取新的飞书访问令牌...');
-            Logger.debug('认证请求参数:', requestData);
-            // 不使用通用的request方法，因为这个请求不需要认证
-            // 为了确保正确处理响应，我们直接使用axios
-            const url = `${this.getBaseUrl()}${this.getAuthEndpoint()}`;
-            const headers = { 'Content-Type': 'application/json' };
-            Logger.debug(`发送认证请求到: ${url}`);
-            const response = await axios.post(url, requestData, { headers });
-            Logger.debug('认证响应:', response.data);
-            if (!response.data || typeof response.data !== 'object') {
-                throw new Error('获取飞书访问令牌失败：响应格式无效');
-            }
-            // 检查错误码
-            if (response.data.code !== 0) {
-                throw new Error(`获取飞书访问令牌失败：${response.data.msg || '未知错误'} (错误码: ${response.data.code})`);
-            }
-            if (!response.data.tenant_access_token) {
-                throw new Error('获取飞书访问令牌失败：响应中没有token');
-            }
-            this.accessToken = response.data.tenant_access_token;
-            this.tokenExpireTime = Date.now() + Math.min(response.data.expire * 1000, this.config.feishu.tokenLifetime);
-            // 缓存令牌
-            this.cacheManager.cacheToken(this.accessToken, response.data.expire);
-            Logger.info(`成功获取新的飞书访问令牌，有效期: ${response.data.expire} 秒`);
-            return this.accessToken;
-        }
-        catch (error) {
-            Logger.error('获取访问令牌失败:', error);
-            this.handleApiError(error, '获取飞书访问令牌失败');
-        }
+        // 通过HTTP请求调用配置的tokenEndpoint接口
+        const { appId, appSecret, authType, tokenEndpoint } = this.config.feishu;
+        const params = new URLSearchParams({
+            client_id: appId,
+            client_secret: appSecret,
+            token_type: authType
+        });
+        const url = `${tokenEndpoint}?${params.toString()}`;
+        const response = await axios.get(url);
+        const tokenResult = response.data?.data;
+        if (tokenResult && tokenResult.access_token) {
+            Logger.debug('使用Http的访问令牌');
+            CacheManager.getInstance().cacheToken(tokenResult.access_token, tokenResult.expires_in);
+            return tokenResult.access_token;
+        }
+        if (tokenResult && tokenResult.needAuth && tokenResult.url) {
+            throw new Error(`请在浏览器打开以下链接进行授权：\n\n[点击授权](${tokenResult.url})`);
+        }
+        throw new Error('无法获取有效的access_token');
     }
     /**
      * 创建飞书文档

package/dist/services/feishuAuthService.js

@@ -0,0 +1,185 @@
+import axios from 'axios';
+import { Config } from '../utils/config.js';
+import { CacheManager } from '../utils/cache.js';
+import { Logger } from '../utils/logger.js';
+export class AuthService {
+    constructor() {
+        Object.defineProperty(this, "config", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: Config.getInstance()
+        });
+        Object.defineProperty(this, "cache", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: CacheManager.getInstance()
+        });
+    }
+    // 获取token主入口
+    async getToken(options) {
+        Logger.warn('[AuthService] getToken called', options);
+        const config = this.config.feishu;
+        const client_id = options?.client_id || config.appId;
+        const client_secret = options?.client_secret || config.appSecret;
+        const authType = options?.authType || config.authType;
+        const clientKey = await CacheManager.getClientKey(client_id, client_secret);
+        Logger.warn('[AuthService] getToken resolved clientKey', clientKey, 'authType', authType);
+        if (authType === 'tenant') {
+            return this.getTenantToken(client_id, client_secret, clientKey);
+        }
+        else {
+            let tokenObj = this.cache.getUserToken(clientKey);
+            const now = Date.now() / 1000;
+            if (!tokenObj || tokenObj.refresh_token_expires_at < now) {
+                Logger.warn('[AuthService] No user token in cache, need user auth', clientKey);
+                // 返回授权链接
+                const redirect_uri = encodeURIComponent(`http://localhost:${this.config.server.port}/callback`);
+                const scope = encodeURIComponent('base:app:read bitable:app bitable:app:readonly board:whiteboard:node:read contact:user.employee_id:readonly docs:document.content:read docx:document docx:document.block:convert docx:document:create docx:document:readonly drive:drive drive:drive:readonly drive:file drive:file:upload sheets:spreadsheet sheets:spreadsheet:readonly space:document:retrieve space:folder:create wiki:space:read wiki:space:retrieve wiki:wiki wiki:wiki:readonly offline_access');
+                const state = clientKey;
+                const url = `https://accounts.feishu.cn/open-apis/authen/v1/authorize?client_id=${client_id}&redirect_uri=${redirect_uri}&scope=${scope}&state=${state}`;
+                return { needAuth: true, url };
+            }
+            Logger.debug('[AuthService] User token found in cache', tokenObj);
+            if (tokenObj.expires_at && tokenObj.expires_at < now) {
+                Logger.warn('[AuthService] User token expired, try refresh', tokenObj);
+                if (tokenObj.refresh_token) {
+                    tokenObj = await this.refreshUserToken(tokenObj.refresh_token, clientKey, client_id, client_secret);
+                }
+                else {
+                    Logger.warn('[AuthService] No refresh_token, clear cache and require re-auth', clientKey);
+                    this.cache.cacheUserToken(clientKey, null, 0);
+                    return { needAuth: true, url: '请重新授权' };
+                }
+            }
+            Logger.warn('[AuthService] Return user access_token', tokenObj.access_token);
+            // 计算剩余有效期（秒）
+            const expires_in = tokenObj.expires_at ? Math.max(tokenObj.expires_at - now, 0) : undefined;
+            return { access_token: tokenObj.access_token, expires_in, ...tokenObj };
+        }
+    }
+    // 获取tenant_access_token
+    async getTenantToken(client_id, client_secret, clientKey) {
+        Logger.warn('[AuthService] getTenantToken called', { client_id, clientKey });
+        // 尝试从缓存获取
+        const cacheKey = clientKey;
+        const cachedTokenObj = this.cache.getTenantToken(cacheKey);
+        if (cachedTokenObj) {
+            Logger.warn('[AuthService] Tenant token cache hit', cacheKey);
+            const { tenant_access_token, expire_at } = cachedTokenObj;
+            const now = Math.floor(Date.now() / 1000);
+            const expires_in = expire_at ? Math.max(expire_at - now, 0) : undefined;
+            return { access_token: tenant_access_token, expires_in };
+        }
+        try {
+            const requestData = {
+                app_id: client_id,
+                app_secret: client_secret,
+            };
+            const url = 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal';
+            const headers = { 'Content-Type': 'application/json' };
+            Logger.debug('[AuthService] Requesting tenant_access_token', url, requestData);
+            const response = await axios.post(url, requestData, { headers });
+            const data = response.data;
+            Logger.debug('[AuthService] tenant_access_token response', data);
+            if (!data || typeof data !== 'object') {
+                Logger.error('[AuthService] tenant_access_token invalid response', data);
+                throw new Error('获取飞书访问令牌失败：响应格式无效');
+            }
+            if (data.code !== 0) {
+                Logger.error('[AuthService] tenant_access_token error', data);
+                throw new Error(`获取飞书访问令牌失败：${data.msg || '未知错误'} (错误码: ${data.code})`);
+            }
+            if (!data.tenant_access_token) {
+                Logger.error('[AuthService] tenant_access_token missing in response', data);
+                throw new Error('获取飞书访问令牌失败：响应中没有token');
+            }
+            // 计算绝对过期时间戳
+            const expire_at = Math.floor(Date.now() / 1000) + (data.expire || 0);
+            const tokenObj = {
+                tenant_access_token: data.tenant_access_token,
+                expire_at
+            };
+            this.cache.cacheTenantToken(cacheKey, tokenObj, data.expire);
+            Logger.warn('[AuthService] tenant_access_token cached', cacheKey);
+            // 返回token对象和expires_in
+            return { access_token: data.tenant_access_token, expires_in: data.expire, expire_at };
+        }
+        catch (error) {
+            Logger.error('[AuthService] getTenantToken error', error);
+            throw new Error('获取飞书访问令牌失败: ' + (error instanceof Error ? error.message : String(error)));
+        }
+    }
+    // 刷新user_access_token
+    async refreshUserToken(refresh_token, clientKey, client_id, client_secret) {
+        Logger.warn('[AuthService] refreshUserToken called', { clientKey });
+        const body = {
+            grant_type: 'refresh_token',
+            client_id,
+            client_secret,
+            refresh_token
+        };
+        Logger.debug('[AuthService] refreshUserToken request', body);
+        const response = await axios.post('https://open.feishu.cn/open-apis/authen/v2/oauth/token', body, { headers: { 'Content-Type': 'application/json' } });
+        const data = response.data;
+        Logger.debug('[AuthService] refreshUserToken response', data);
+        if (data && data.access_token && data.expires_in) {
+            data.expires_in = Math.floor(Date.now() / 1000) + data.expires_in;
+            this.cache.cacheUserToken(clientKey, data, data.expires_in);
+            Logger.warn('[AuthService] Refreshed user_access_token cached', clientKey);
+        }
+        else {
+            Logger.warn('[AuthService] refreshUserToken failed', data);
+        }
+        return data;
+    }
+    // 获取用户信息
+    async getUserInfo(access_token) {
+        Logger.warn('[AuthService] getUserInfo called');
+        try {
+            const response = await axios.get('https://open.feishu.cn/open-apis/authen/v1/user_info', { headers: { Authorization: `Bearer ${access_token}` } });
+            Logger.debug('[AuthService] getUserInfo response', response.data);
+            return response.data;
+        }
+        catch (error) {
+            Logger.error('[AuthService] getUserInfo error', error);
+            throw error;
+        }
+    }
+    // 通过授权码换取user_access_token
+    async getUserTokenByCode({ client_id, client_secret, code, redirect_uri, code_verifier }) {
+        Logger.warn('[AuthService] getUserTokenByCode called', { client_id, code, redirect_uri });
+        const clientKey = await CacheManager.getClientKey(client_id, client_secret);
+        const body = {
+            grant_type: 'authorization_code',
+            client_id,
+            client_secret,
+            code,
+            redirect_uri
+        };
+        if (code_verifier)
+            body.code_verifier = code_verifier;
+        Logger.debug('[AuthService] getUserTokenByCode request', body);
+        const response = await fetch('https://open.feishu.cn/open-apis/authen/v2/oauth/token', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify(body)
+        });
+        const data = await response.json();
+        Logger.debug('[AuthService] getUserTokenByCode response', data);
+        // 缓存user_access_token
+        if (data && data.access_token && data.expires_in) {
+            data.expires_at = Math.floor(Date.now() / 1000) + data.expires_in;
+            data.refresh_token_expires_at = Math.floor(Date.now() / 1000) + data.refresh_token_expires_in;
+            // 缓存时间应为 refresh_token 的有效期，防止缓存被提前清理
+            const refreshTtl = data.refresh_expires_in || 3600 * 24 * 365; // 默认1年
+            this.cache.cacheUserToken(clientKey, data, refreshTtl);
+            Logger.warn('[AuthService] user_access_token cached', clientKey, 'refreshTtl', refreshTtl);
+        }
+        else {
+            Logger.warn('[AuthService] getUserTokenByCode failed', data);
+        }
+        return data;
+    }
+}

package/dist/utils/cache.js

@@ -1,5 +1,7 @@
 import { Config } from './config.js';
 import { Logger } from './logger.js';
+import * as fs from 'fs';
+import * as path from 'path';
 /**
  * 缓存管理器类
  * 提供内存缓存功能，支持TTL和最大容量限制
@@ -22,8 +24,15 @@ export class CacheManager {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "userTokenCacheFile", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: path.resolve(process.cwd(), 'user_token_cache.json')
+        });
         this.cache = new Map();
         this.config = Config.getInstance();
+        this.loadUserTokenCache();
         // 定期清理过期缓存
         setInterval(() => {
             this.cleanExpiredCache();
@@ -62,6 +71,9 @@ export class CacheManager {
             expiresAt: now + (actualTtl * 1000)
         });
         Logger.debug(`缓存设置: ${key} (TTL: ${actualTtl}秒)`);
+        if (key.startsWith('user_access_token:')) {
+            this.saveUserTokenCache();
+        }
         return true;
     }
     /**
@@ -99,6 +111,9 @@ export class CacheManager {
         const result = this.cache.delete(key);
         if (result) {
             Logger.debug(`缓存删除: ${key}`);
+            if (key.startsWith('user_access_token:')) {
+                this.saveUserTokenCache();
+            }
         }
         return result;
     }
@@ -185,6 +200,47 @@ export class CacheManager {
             ttl: this.config.cache.ttl
         };
     }
+    /**
+     * 缓存Wiki到文档ID的转换结果
+     * @param wikiToken Wiki Token
+     * @param documentId 文档ID
+     * @returns 是否成功设置缓存
+     */
+    cacheWikiToDocId(wikiToken, documentId) {
+        return this.set(`wiki:${wikiToken}`, documentId);
+    }
+    /**
+     * 获取缓存的Wiki转换结果
+     * @param wikiToken Wiki Token
+     * @returns 文档ID，如果未找到或已过期则返回null
+     */
+    getWikiToDocId(wikiToken) {
+        return this.get(`wiki:${wikiToken}`);
+    }
+    /**
+     * 缓存tenant访问令牌
+     * @param token 访问令牌
+     * @param expiresInSeconds 过期时间（秒）
+     * @param key 缓存键，默认为'access_token'
+     * @returns 是否成功设置缓存
+     */
+    cacheTenantToken(key, token, expiresInSeconds) {
+        return this.set(`tenant_access_token:${key}`, token, expiresInSeconds);
+    }
+    /**
+     * 获取tenant缓存的访问令牌
+     * @param key 缓存键，默认为'access_token'
+     * @returns 访问令牌，如果未找到或已过期则返回null
+     */
+    getTenantToken(key) {
+        return this.get(`tenant_access_token:${key}`);
+    }
+    cacheUserToken(key, tokenObj, expiresIn) {
+        return this.set(`user_access_token:${key}`, tokenObj, expiresIn);
+    }
+    getUserToken(key) {
+        return this.get(`user_access_token:${key}`);
+    }
     /**
      * 缓存访问令牌
      * @param token 访问令牌
@@ -192,30 +248,55 @@ export class CacheManager {
      * @returns 是否成功设置缓存
      */
     cacheToken(token, expiresInSeconds) {
-        return this.set('access_token', token, expiresInSeconds);
+        return this.set(`access_token`, token, expiresInSeconds);
     }
     /**
      * 获取缓存的访问令牌
      * @returns 访问令牌，如果未找到或已过期则返回null
      */
     getToken() {
-        return this.get('access_token');
+        return this.get(`access_token`);
     }
     /**
-     * 缓存Wiki到文档ID的转换结果
-     * @param wikiToken Wiki Token
-     * @param documentId 文档ID
-     * @returns 是否成功设置缓存
+     * 生成client_id+client_secret签名
+     * @param client_id
+     * @param client_secret
+     * @returns 唯一key
      */
-    cacheWikiToDocId(wikiToken, documentId) {
-        return this.set(`wiki:${wikiToken}`, documentId);
+    static async getClientKey(client_id, client_secret) {
+        const crypto = await import('crypto');
+        return crypto.createHash('sha256').update(client_id + ':' + client_secret).digest('hex');
     }
-    /**
-     * 获取缓存的Wiki转换结果
-     * @param wikiToken Wiki Token
-     * @returns 文档ID，如果未找到或已过期则返回null
-     */
-    getWikiToDocId(wikiToken) {
-        return this.get(`wiki:${wikiToken}`);
+    loadUserTokenCache() {
+        if (fs.existsSync(this.userTokenCacheFile)) {
+            try {
+                const raw = fs.readFileSync(this.userTokenCacheFile, 'utf-8');
+                const obj = JSON.parse(raw);
+                for (const k in obj) {
+                    if (k.startsWith('user_access_token:')) {
+                        this.cache.set(k, obj[k]);
+                    }
+                }
+                Logger.info(`已加载本地 user_token_cache.json，共${Object.keys(obj).length}条`);
+            }
+            catch (e) {
+                Logger.warn('加载 user_token_cache.json 失败', e);
+            }
+        }
+    }
+    saveUserTokenCache() {
+        const obj = {};
+        for (const [k, v] of this.cache.entries()) {
+            if (k.startsWith('user_access_token:')) {
+                obj[k] = v;
+            }
+        }
+        try {
+            fs.writeFileSync(this.userTokenCacheFile, JSON.stringify(obj, null, 2), 'utf-8');
+            Logger.debug('user_token_cache.json 已写入');
+        }
+        catch (e) {
+            Logger.warn('写入 user_token_cache.json 失败', e);
+        }
     }
 }

package/dist/utils/config.js

@@ -110,6 +110,14 @@ export class Config {
             'cache-ttl': {
                 type: 'number',
                 description: '缓存生存时间（秒）'
+            },
+            'feishu-auth-type': {
+                type: 'string',
+                description: '飞书认证类型 (tenant 或 user)'
+            },
+            'feishu-token-endpoint': {
+                type: 'string',
+                description: '获取token的接口地址，默认 http://localhost:3333/getToken'
             }
         })
             .help()
@@ -144,11 +152,14 @@ export class Config {
      * @returns 飞书配置
      */
     initFeishuConfig(argv) {
+        // 先初始化serverConfig以获取端口
+        const serverConfig = this.server || this.initServerConfig(argv);
         const feishuConfig = {
             appId: '',
             appSecret: '',
             baseUrl: 'https://open.feishu.cn/open-apis',
-            tokenLifetime: 7200000 // 2小时，单位：毫秒
+            authType: 'tenant', // 默认
+            tokenEndpoint: `http://127.0.0.1:${serverConfig.port}/getToken`, // 默认动态端口
         };
         // 处理App ID
         if (argv['feishu-app-id']) {
@@ -180,13 +191,29 @@ export class Config {
         else {
             this.configSources['feishu.baseUrl'] = ConfigSource.DEFAULT;
         }
-        // 处理token生命周期
-        if (process.env.FEISHU_TOKEN_LIFETIME) {
-            feishuConfig.tokenLifetime = parseInt(process.env.FEISHU_TOKEN_LIFETIME, 10) * 1000;
-            this.configSources['feishu.tokenLifetime'] = ConfigSource.ENV;
+        // 处理authType
+        if (argv['feishu-auth-type']) {
+            feishuConfig.authType = argv['feishu-auth-type'] === 'user' ? 'user' : 'tenant';
+            this.configSources['feishu.authType'] = ConfigSource.CLI;
+        }
+        else if (process.env.FEISHU_AUTH_TYPE) {
+            feishuConfig.authType = process.env.FEISHU_AUTH_TYPE === 'user' ? 'user' : 'tenant';
+            this.configSources['feishu.authType'] = ConfigSource.ENV;
         }
         else {
-            this.configSources['feishu.tokenLifetime'] = ConfigSource.DEFAULT;
+            this.configSources['feishu.authType'] = ConfigSource.DEFAULT;
+        }
+        // 处理tokenEndpoint
+        if (argv['feishu-token-endpoint']) {
+            feishuConfig.tokenEndpoint = argv['feishu-token-endpoint'];
+            this.configSources['feishu.tokenEndpoint'] = ConfigSource.CLI;
+        }
+        else if (process.env.FEISHU_TOKEN_ENDPOINT) {
+            feishuConfig.tokenEndpoint = process.env.FEISHU_TOKEN_ENDPOINT;
+            this.configSources['feishu.tokenEndpoint'] = ConfigSource.ENV;
+        }
+        else {
+            this.configSources['feishu.tokenEndpoint'] = ConfigSource.DEFAULT;
         }
         return feishuConfig;
     }
@@ -319,7 +346,8 @@ export class Config {
             Logger.info(`- App Secret: ${this.maskApiKey(this.feishu.appSecret)} (来源: ${this.configSources['feishu.appSecret']})`);
         }
         Logger.info(`- API URL: ${this.feishu.baseUrl} (来源: ${this.configSources['feishu.baseUrl']})`);
-        Logger.info(`- Token生命周期: ${this.feishu.tokenLifetime / 1000}秒 (来源: ${this.configSources['feishu.tokenLifetime']})`);
+        Logger.info(`- 认证类型: ${this.feishu.authType} (来源: ${this.configSources['feishu.authType']})`);
+        Logger.info(`- Token获取地址: ${this.feishu.tokenEndpoint} (来源: ${this.configSources['feishu.tokenEndpoint']})`);
         Logger.info('日志配置:');
         Logger.info(`- 日志级别: ${LogLevel[this.log.level]} (来源: ${this.configSources['log.level']})`);
         Logger.info(`- 显示时间戳: ${this.log.showTimestamp} (来源: ${this.configSources['log.showTimestamp']})`);
@@ -358,6 +386,10 @@ export class Config {
             Logger.error('缺少飞书应用Secret，请通过环境变量FEISHU_APP_SECRET或命令行参数--feishu-app-secret提供');
             return false;
         }
+        if (!this.feishu.tokenEndpoint) {
+            Logger.error('缺少飞书Token获取地址，请通过环境变量FEISHU_TOKEN_ENDPOINT或命令行参数--feishu-token-endpoint提供');
+            return false;
+        }
         return true;
     }
 }