trustbase-seller-backend 0.1.5

package/api/oauth-adapters.js

@@ -0,0 +1,456 @@
+"use strict";
+/**
+ * TrustChain OAuth Bridge — Platform adapters (微信 / 支付宝 / 抖音)
+ *
+ * 设计要点 (baobei #312 实战锁版, 2026-08-23):
+ * - base OAuthAdapter 接口: login / refresh / unlink / getProfile
+ * - 3 个具体 adapter: WechatAdapter / AlipayAdapter / DouyinAdapter
+ * - mock 模式默认: 不真调微信/支付宝/抖音 API, 直接用 code 派生 deterministic openid
+ * - 真 API 模式: env var 提供 appid/secret 后, 调 https API
+ *
+ * 实战锁版 (Lesson #345 写路径 4 坑):
+ * - appid/secret 全 env var (TEST_WECHAT_APPID/TEST_WECHAT_SECRET 等)
+ * - 默认 mock, 文档强制标注
+ * - fail loud: 任何环境异常直接抛错 (Lesson #266a)
+ *
+ * Adapter Pattern:
+ *   adapter.codeToOpenid(code) → 统一入口
+ *   adapter.platform → 'wechat' | 'alipay' | 'douyin'
+ *
+ * @see docs/oauth-bridge-v0.1-spec.md
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthAdapterRegistry = exports.DouyinAdapter = exports.AlipayAdapter = exports.WechatAdapter = void 0;
+const crypto = __importStar(require("crypto"));
+// ===================== Mock helper =====================
+/**
+ * 把任意 code 派生为 deterministic openid (mock 模式用)
+ * 不同平台前缀, 防冲突
+ */
+function mockOpenid(platform, code) {
+    const prefix = platform === 'wechat' ? 'mock_wx_' : platform === 'alipay' ? 'mock_ali_' : 'mock_dy_';
+    const h = crypto.createHash('sha256').update(`${platform}:${code}`).digest('hex');
+    return `${prefix}${h.slice(0, 24)}`;
+}
+function mockUnionid(platform, code) {
+    if (platform !== 'wechat')
+        return undefined;
+    const h = crypto.createHash('sha256').update(`union:${code}`).digest('hex');
+    return `mock_union_${h.slice(0, 16)}`;
+}
+function mockNickname(platform, code) {
+    return `${platform}_user_${code.slice(0, 6)}`;
+}
+/**
+ * 微信小程序登录 adapter
+ *
+ * 流程 (前端 wx.login → code):
+ *   POST https://api.weixin.qq.com/sns/jscode2session
+ *     ?appid=APPID&secret=SECRET&js_code=CODE&grant_type=authorization_code
+ *   → { openid, session_key, unionid? }
+ *
+ * 实战锁版:
+ * - 默认 mock: 不调真微信, 用 code 派生 openid
+ * - 真模式: 需要 WECHAT_APPID + WECHAT_SECRET env var (Lesson #345 写路径)
+ */
+class WechatAdapter {
+    platform = 'wechat';
+    displayName = '微信';
+    name = 'wechat';
+    config;
+    mockMode;
+    constructor(config = {}) {
+        this.config = {
+            apiBaseUrl: config.apiBaseUrl || 'https://api.weixin.qq.com',
+            timeoutMs: config.timeoutMs ?? 5000,
+        };
+        // 优先级: 显式 > env var > mock
+        const envAppid = process.env.TEST_WECHAT_APPID || process.env.WECHAT_APPID;
+        const envSecret = process.env.TEST_WECHAT_SECRET || process.env.WECHAT_SECRET;
+        this.config.appid = config.appid || envAppid;
+        this.config.secret = config.secret || envSecret;
+        this.mockMode = !this.config.appid || !this.config.secret;
+    }
+    isMockMode() {
+        return this.mockMode;
+    }
+    async codeToProfile(code) {
+        if (!code)
+            throw new Error('[WechatAdapter] code required');
+        if (this.mockMode) {
+            const openid = mockOpenid('wechat', code);
+            const unionid = mockUnionid('wechat', code);
+            return {
+                profile: {
+                    openid,
+                    unionid,
+                    nickname: mockNickname('wechat', code),
+                    avatar: 'https://mock.wechat/avatar/' + openid + '.jpg',
+                    session_key: crypto.randomBytes(16).toString('hex'),
+                },
+                platform_access_token: `mock_wx_at_${crypto.randomBytes(16).toString('hex')}`,
+                platform_refresh_token: `mock_wx_rt_${crypto.randomBytes(16).toString('hex')}`,
+                expires_in: 7200,
+                scope: 'snsapi_login',
+            };
+        }
+        // 真模式: 调微信 jscode2session
+        const url = new URL(`${this.config.apiBaseUrl}/sns/jscode2session`);
+        url.searchParams.set('appid', this.config.appid);
+        url.searchParams.set('secret', this.config.secret);
+        url.searchParams.set('js_code', code);
+        url.searchParams.set('grant_type', 'authorization_code');
+        const resp = await fetch(url.toString(), {
+            method: 'GET',
+            signal: AbortSignal.timeout(this.config.timeoutMs),
+        });
+        if (!resp.ok)
+            throw new Error(`[WechatAdapter] http ${resp.status}`);
+        const data = (await resp.json());
+        if (data.errcode) {
+            throw new Error(`[WechatAdapter] wechat errcode=${data.errcode} ${data.errmsg}`);
+        }
+        if (!data.openid) {
+            throw new Error('[WechatAdapter] no openid in response');
+        }
+        return {
+            profile: {
+                openid: data.openid,
+                unionid: data.unionid,
+                session_key: data.session_key,
+            },
+            platform_access_token: 'wechat_at_' + crypto.randomBytes(16).toString('hex'),
+            platform_refresh_token: 'wechat_rt_' + crypto.randomBytes(16).toString('hex'),
+            expires_in: 7200,
+            scope: 'snsapi_login',
+        };
+    }
+    async refreshPlatformToken(platformRefreshToken) {
+        if (this.mockMode) {
+            return {
+                profile: {
+                    openid: mockOpenid('wechat', platformRefreshToken),
+                },
+                platform_access_token: `mock_wx_at_${crypto.randomBytes(16).toString('hex')}`,
+                platform_refresh_token: `mock_wx_rt_${crypto.randomBytes(16).toString('hex')}`,
+                expires_in: 7200,
+                scope: 'snsapi_login',
+            };
+        }
+        // 微信 refresh_token 走 sns/oauth2/refresh_token
+        const url = new URL(`${this.config.apiBaseUrl}/sns/oauth2/refresh_token`);
+        url.searchParams.set('appid', this.config.appid);
+        url.searchParams.set('grant_type', 'refresh_token');
+        url.searchParams.set('refresh_token', platformRefreshToken);
+        const resp = await fetch(url.toString(), {
+            method: 'GET',
+            signal: AbortSignal.timeout(this.config.timeoutMs),
+        });
+        if (!resp.ok)
+            throw new Error(`[WechatAdapter] refresh http ${resp.status}`);
+        const data = (await resp.json());
+        if (data.errcode || !data.access_token) {
+            throw new Error(`[WechatAdapter] refresh failed: ${data.errcode ?? 'no access_token'}`);
+        }
+        return {
+            profile: { openid: data.openid || '' },
+            platform_access_token: data.access_token,
+            platform_refresh_token: data.refresh_token,
+            expires_in: data.expires_in ?? 7200,
+            scope: data.scope ?? 'snsapi_login',
+        };
+    }
+    async unlink(_openid) {
+        // 微信没有"撤销 openid" 接口, 业务侧自行解绑 users.wechat_openid
+        return { ok: true };
+    }
+    async getProfile(openid, _platformAccessToken) {
+        // mock 模式直接拼
+        return {
+            openid,
+            nickname: mockNickname('wechat', openid),
+            avatar: 'https://mock.wechat/avatar/' + openid + '.jpg',
+        };
+    }
+}
+exports.WechatAdapter = WechatAdapter;
+/**
+ * 支付宝登录 adapter
+ *
+ * 流程:
+ *   POST https://openapi.alipay.com/gateway.do
+ *     method=alipay.system.oauth.token
+ *     grant_type=authorization_code
+ *     code=<auth_code>
+ *   → { access_token, user_id, ... }
+ *
+ * 实战锁版 (Lesson #345):
+ * - 真模式需 ALIPAY_APPID + ALIPAY_PRIVATE_KEY (env var)
+ * - 签名复杂 (RSA2), mock 模式只返回 deterministic user_id
+ */
+class AlipayAdapter {
+    platform = 'alipay';
+    displayName = '支付宝';
+    name = 'alipay';
+    config;
+    mockMode;
+    constructor(config = {}) {
+        this.config = {
+            apiBaseUrl: config.apiBaseUrl || 'https://openapi.alipay.com/gateway.do',
+            timeoutMs: config.timeoutMs ?? 5000,
+        };
+        const envAppid = process.env.TEST_ALIPAY_APPID || process.env.ALIPAY_APPID;
+        const envKey = process.env.TEST_ALIPAY_PRIVATE_KEY || process.env.ALIPAY_PRIVATE_KEY;
+        this.config.appid = config.appid || envAppid;
+        this.config.privateKey = config.privateKey || envKey;
+        this.mockMode = !this.config.appid || !this.config.privateKey;
+    }
+    isMockMode() {
+        return this.mockMode;
+    }
+    async codeToProfile(code) {
+        if (!code)
+            throw new Error('[AlipayAdapter] code (auth_code) required');
+        if (this.mockMode) {
+            const user_id = mockOpenid('alipay', code); // 用同一个 mockOpenid 但 alipay 前缀
+            return {
+                profile: {
+                    openid: user_id, // 支付宝习惯 user_id 当 openid 用
+                    user_id,
+                    nickname: mockNickname('alipay', code),
+                    avatar: 'https://mock.alipay/avatar/' + user_id + '.jpg',
+                },
+                platform_access_token: `mock_ali_at_${crypto.randomBytes(16).toString('hex')}`,
+                expires_in: 86400, // 24h
+                scope: 'auth_user',
+            };
+        }
+        // 真模式: 调 alipay.system.oauth.token (需 RSA2 签名, 简化实现)
+        const params = new URLSearchParams({
+            method: 'alipay.system.oauth.token',
+            app_id: this.config.appid,
+            charset: 'UTF-8',
+            sign_type: 'RSA2',
+            timestamp: new Date().toISOString().replace(/\.\d{3}Z$/, '+08:00'),
+            version: '1.0',
+            grant_type: 'authorization_code',
+            code,
+        });
+        const resp = await fetch(this.config.apiBaseUrl, {
+            method: 'POST',
+            body: params,
+            signal: AbortSignal.timeout(this.config.timeoutMs),
+        });
+        if (!resp.ok)
+            throw new Error(`[AlipayAdapter] http ${resp.status}`);
+        const json = (await resp.json());
+        const r = json.alipay_system_oauth_token_response;
+        if (!r?.access_token || !r?.user_id) {
+            throw new Error(`[AlipayAdapter] failed: ${json.error_response?.msg ?? 'no user_id'}`);
+        }
+        return {
+            profile: {
+                openid: r.user_id,
+                user_id: r.user_id,
+            },
+            platform_access_token: r.access_token,
+            platform_refresh_token: r.refresh_token,
+            expires_in: r.expires_in ?? 86400,
+            scope: r.scope ?? 'auth_user',
+        };
+    }
+    async refreshPlatformToken(_platformRefreshToken) {
+        // 支付宝 oauth token 一般不 refresh, 失效重走 auth_code 流程
+        throw new Error('[AlipayAdapter] refresh not supported, re-login via auth_code');
+    }
+    async unlink(_userId) {
+        return { ok: true };
+    }
+    async getProfile(userId, _accessToken) {
+        return {
+            openid: userId,
+            user_id: userId,
+            nickname: mockNickname('alipay', userId),
+        };
+    }
+}
+exports.AlipayAdapter = AlipayAdapter;
+/**
+ * 抖音小程序登录 adapter
+ *
+ * 流程:
+ *   POST https://open.douyin.com/oauth/token/
+ *     client_key, client_secret, code, grant_type=authorization_code
+ *   → { access_token, open_id, refresh_token, expires_in }
+ *
+ *   GET https://open.douyin.com/oauth/userinfo/
+ *     access_token, open_id
+ *   → { nickname, avatar, ... }
+ */
+class DouyinAdapter {
+    platform = 'douyin';
+    displayName = '抖音';
+    name = 'douyin';
+    config;
+    mockMode;
+    constructor(config = {}) {
+        this.config = {
+            apiBaseUrl: config.apiBaseUrl || 'https://open.douyin.com',
+            timeoutMs: config.timeoutMs ?? 5000,
+        };
+        const envKey = process.env.TEST_DOUYIN_CLIENT_KEY || process.env.DOUYIN_CLIENT_KEY;
+        const envSec = process.env.TEST_DOUYIN_CLIENT_SECRET || process.env.DOUYIN_CLIENT_SECRET;
+        this.config.clientKey = config.clientKey || envKey;
+        this.config.clientSecret = config.clientSecret || envSec;
+        this.mockMode = !this.config.clientKey || !this.config.clientSecret;
+    }
+    isMockMode() {
+        return this.mockMode;
+    }
+    async codeToProfile(code) {
+        if (!code)
+            throw new Error('[DouyinAdapter] code required');
+        if (this.mockMode) {
+            const openid = mockOpenid('douyin', code);
+            return {
+                profile: {
+                    openid,
+                    nickname: mockNickname('douyin', code),
+                    avatar: 'https://mock.douyin/avatar/' + openid + '.jpg',
+                },
+                platform_access_token: `mock_dy_at_${crypto.randomBytes(16).toString('hex')}`,
+                platform_refresh_token: `mock_dy_rt_${crypto.randomBytes(16).toString('hex')}`,
+                expires_in: 14400, // 4h
+                scope: 'user_info',
+            };
+        }
+        // 真模式: POST /oauth/token/
+        const params = new URLSearchParams({
+            client_key: this.config.clientKey,
+            client_secret: this.config.clientSecret,
+            code,
+            grant_type: 'authorization_code',
+        });
+        const resp = await fetch(`${this.config.apiBaseUrl}/oauth/token/`, {
+            method: 'POST',
+            body: params,
+            signal: AbortSignal.timeout(this.config.timeoutMs),
+        });
+        if (!resp.ok)
+            throw new Error(`[DouyinAdapter] http ${resp.status}`);
+        const json = (await resp.json());
+        const d = json.data;
+        if (!d?.access_token || !d?.open_id) {
+            throw new Error(`[DouyinAdapter] failed: ${json.message ?? 'no open_id'}`);
+        }
+        return {
+            profile: { openid: d.open_id },
+            platform_access_token: d.access_token,
+            platform_refresh_token: d.refresh_token,
+            expires_in: d.expires_in ?? 14400,
+            scope: d.scope ?? 'user_info',
+        };
+    }
+    async refreshPlatformToken(rt) {
+        if (this.mockMode) {
+            return {
+                profile: { openid: mockOpenid('douyin', rt) },
+                platform_access_token: `mock_dy_at_${crypto.randomBytes(16).toString('hex')}`,
+                platform_refresh_token: `mock_dy_rt_${crypto.randomBytes(16).toString('hex')}`,
+                expires_in: 14400,
+                scope: 'user_info',
+            };
+        }
+        const params = new URLSearchParams({
+            client_key: this.config.clientKey,
+            client_secret: this.config.clientSecret,
+            grant_type: 'refresh_token',
+            refresh_token: rt,
+        });
+        const resp = await fetch(`${this.config.apiBaseUrl}/oauth/refresh_token/`, {
+            method: 'POST',
+            body: params,
+            signal: AbortSignal.timeout(this.config.timeoutMs),
+        });
+        if (!resp.ok)
+            throw new Error(`[DouyinAdapter] refresh http ${resp.status}`);
+        const json = (await resp.json());
+        const d = json.data;
+        if (!d?.access_token) {
+            throw new Error(`[DouyinAdapter] refresh failed: ${json.message ?? 'no access_token'}`);
+        }
+        return {
+            profile: { openid: '' }, // refresh 模式不一定返回 open_id
+            platform_access_token: d.access_token,
+            platform_refresh_token: d.refresh_token,
+            expires_in: d.expires_in ?? 14400,
+            scope: d.scope ?? 'user_info',
+        };
+    }
+    async unlink(_openId) {
+        return { ok: true };
+    }
+    async getProfile(openId, _accessToken) {
+        return {
+            openid: openId,
+            nickname: mockNickname('douyin', openId),
+        };
+    }
+}
+exports.DouyinAdapter = DouyinAdapter;
+// ===================== Adapter registry =====================
+class OAuthAdapterRegistry {
+    adapters = new Map();
+    constructor() {
+        this.register(new WechatAdapter());
+        this.register(new AlipayAdapter());
+        this.register(new DouyinAdapter());
+    }
+    register(adapter) {
+        this.adapters.set(adapter.platform, adapter);
+    }
+    get(platform) {
+        const a = this.adapters.get(platform);
+        if (!a)
+            throw new Error(`[OAuthAdapterRegistry] no adapter for ${platform}`);
+        return a;
+    }
+    list() {
+        return Array.from(this.adapters.values());
+    }
+}
+exports.OAuthAdapterRegistry = OAuthAdapterRegistry;
+//# sourceMappingURL=oauth-adapters.js.map

package/api/oauth-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-adapters.js","sourceRoot":"","sources":["../../src/api/oauth-adapters.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AA4DjC,0DAA0D;AAE1D;;;GAGG;AACH,SAAS,UAAU,CAAC,QAAuB,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;IACrG,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,QAAuB,EAAE,IAAY;IACxD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB,EAAE,IAAY;IACzD,OAAO,GAAG,QAAQ,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAeD;;;;;;;;;;;GAWG;AACH,MAAa,aAAa;IACf,QAAQ,GAAkB,QAAQ,CAAC;IACnC,WAAW,GAAG,IAAI,CAAC;IACnB,IAAI,GAAG,QAAQ,CAAC;IACjB,MAAM,CAAsB;IAC5B,QAAQ,CAAU;IAE1B,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,2BAA2B;YAC5D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;SACpC,CAAC;QACF,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5D,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE;oBACP,MAAM;oBACN,OAAO;oBACP,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC;oBACtC,MAAM,EAAE,6BAA6B,GAAG,MAAM,GAAG,MAAM;oBACvD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;iBACpD;gBACD,qBAAqB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC7E,sBAAsB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9E,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,cAAc;aACtB,CAAC;QACJ,CAAC;QACD,0BAA0B;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,qBAAqB,CAAC,CAAC;QACpE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAO,CAAC,CAAC;QACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACtC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACvC,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAM9B,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;YACD,qBAAqB,EAAE,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5E,sBAAsB,EAAE,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC7E,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,cAAc;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,oBAA4B;QACrD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE;oBACP,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,oBAAoB,CAAC;iBACnD;gBACD,qBAAqB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC7E,sBAAsB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9E,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,cAAc;aACtB,CAAC;QACJ,CAAC;QACD,8CAA8C;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,2BAA2B,CAAC,CAAC;QAC1E,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;QAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;YACvC,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAO9B,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO;YACL,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE;YACtC,qBAAqB,EAAE,IAAI,CAAC,YAAY;YACxC,sBAAsB,EAAE,IAAI,CAAC,aAAa;YAC1C,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,cAAc;SACpC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,kDAAkD;QAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,oBAA4B;QAC3D,aAAa;QACb,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;YACxC,MAAM,EAAE,6BAA6B,GAAG,MAAM,GAAG,MAAM;SACxD,CAAC;IACJ,CAAC;CACF;AAxID,sCAwIC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAa,aAAa;IACf,QAAQ,GAAkB,QAAQ,CAAC;IACnC,WAAW,GAAG,KAAK,CAAC;IACpB,IAAI,GAAG,QAAQ,CAAC;IACjB,MAAM,CAAsB;IAC5B,QAAQ,CAAU;IAE1B,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,uCAAuC;YACxE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;SACpC,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IAChE,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,8BAA8B;YAC1E,OAAO;gBACL,OAAO,EAAE;oBACP,MAAM,EAAE,OAAO,EAAE,2BAA2B;oBAC5C,OAAO;oBACP,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC;oBACtC,MAAM,EAAE,6BAA6B,GAAG,OAAO,GAAG,MAAM;iBACzD;gBACD,qBAAqB,EAAE,eAAe,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9E,UAAU,EAAE,KAAK,EAAE,MAAM;gBACzB,KAAK,EAAE,WAAW;aACnB,CAAC;QACJ,CAAC;QACD,qDAAqD;QACrD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,MAAM,EAAE,2BAA2B;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAM;YAC1B,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC;YAClE,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,oBAAoB;YAChC,IAAI;SACL,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAW,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAS9B,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,kCAAkC,CAAC;QAClD,IAAI,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,cAAc,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO;YACL,OAAO,EAAE;gBACP,MAAM,EAAE,CAAC,CAAC,OAAO;gBACjB,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB;YACD,qBAAqB,EAAE,CAAC,CAAC,YAAY;YACrC,sBAAsB,EAAE,CAAC,CAAC,aAAa;YACvC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,KAAK;YACjC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,qBAA6B;QACtD,iDAAiD;QACjD,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,YAAoB;QACnD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SACzC,CAAC;IACJ,CAAC;CACF;AAlGD,sCAkGC;AAWD;;;;;;;;;;;GAWG;AACH,MAAa,aAAa;IACf,QAAQ,GAAkB,QAAQ,CAAC;IACnC,WAAW,GAAG,IAAI,CAAC;IACnB,IAAI,GAAG,QAAQ,CAAC;IACjB,MAAM,CAAsB;IAC5B,QAAQ,CAAU;IAE1B,YAAY,SAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,yBAAyB;YAC1D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;SACpC,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACnF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;IACtE,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE;oBACP,MAAM;oBACN,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC;oBACtC,MAAM,EAAE,6BAA6B,GAAG,MAAM,GAAG,MAAM;iBACxD;gBACD,qBAAqB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC7E,sBAAsB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9E,UAAU,EAAE,KAAK,EAAE,KAAK;gBACxB,KAAK,EAAE,WAAW;aACnB,CAAC;QACJ,CAAC;QACD,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAU;YAClC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAa;YACxC,IAAI;YACJ,UAAU,EAAE,oBAAoB;SACjC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,eAAe,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAS9B,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,CAAC,EAAE,YAAY,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;YACL,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9B,qBAAqB,EAAE,CAAC,CAAC,YAAY;YACrC,sBAAsB,EAAE,CAAC,CAAC,aAAa;YACvC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,KAAK;YACjC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,EAAU;QACnC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE;gBAC7C,qBAAqB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC7E,sBAAsB,EAAE,cAAc,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;gBAC9E,UAAU,EAAE,KAAK;gBACjB,KAAK,EAAE,WAAW;aACnB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,SAAU;YAClC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAa;YACxC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,uBAAuB,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAU,CAAC;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAQ9B,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACpB,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO;YACL,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,0BAA0B;YACnD,qBAAqB,EAAE,CAAC,CAAC,YAAY;YACrC,sBAAsB,EAAE,CAAC,CAAC,aAAa;YACvC,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,KAAK;YACjC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,YAAoB;QACnD,OAAO;YACL,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SACzC,CAAC;IACJ,CAAC;CACF;AAjID,sCAiIC;AAED,+DAA+D;AAE/D,MAAa,oBAAoB;IACvB,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE1D;QACE,IAAI,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ,CAAC,OAAqB;QAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,GAAG,CAAC,QAAuB;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;CACF;AAtBD,oDAsBC"}

package/api/oauth-bridge.d.ts

@@ -0,0 +1,56 @@
+/**
+ * TrustChain OAuth Bridge — 10 endpoints 实战锁版 (baobei #312/#314)
+ *
+ * 接口契约 (跟 docs/oauth-bridge-v0.1-spec.md 一致):
+ *   POST /api/oauth/wechat/login   — 微信 jscode2session + JWT
+ *   POST /api/oauth/alipay/login   — 支付宝 auth_code + JWT
+ *   POST /api/oauth/douyin/login   — 抖音 code + JWT
+ *   POST /api/oauth/link           — 已有 chain address 想绑新平台 → link_code
+ *   POST /api/oauth/link/confirm   — link_code + confirm → 写入 users
+ *   POST /api/oauth/refresh        — refresh_token → new access_token
+ *   GET  /api/oauth/user/:address  — 查 user 全平台 openid
+ *   POST /api/oauth/unlink         — 解绑平台 (至少留 1 登录方式)
+ *   GET  /api/oauth/apps/:id       — OAuth 应用详情
+ *   POST /api/oauth/authorize      — OAuth authorize 页面后端
+ *
+ * 实战锁版 (Lesson #312/#313/#314/#335/#266a/#345 综合):
+ * - DB: users.chain_address / wechat_openid / alipay_userid / other_openids
+ * - API: JWT sub = chain_address (Lesson #335 三处一致)
+ * - Adapter Pattern: 3 平台抽象 OAuthAdapter 接口
+ * - fail loud: 任何 DB/API 错误抛错 (Lesson #266a)
+ * - 写路径 env var: 微信 appid/secret, 支付宝 private_key (Lesson #345)
+ *
+ * @see src/api/oauth-adapters.ts (Adapter Pattern)
+ * @see src/utils/jwt.ts (HS256 JWT)
+ * @see src/utils/crypto.ts (server generate keypair)
+ * @see src/db/oauth-migrate.ts (DB schema)
+ */
+import { Router } from 'express';
+import Database = require('better-sqlite3');
+import { OAuthAdapterRegistry } from './oauth-adapters';
+export interface OAuthBridgeConfig {
+    db: Database.Database;
+    /** Adapter registry (optional, 默认 new OAuthAdapterRegistry()) */
+    registry?: OAuthAdapterRegistry;
+    /** JWT 签发者 node_id */
+    issuerNodeId?: string;
+    /** access_token 过期秒数, 默认 3600 (1h) */
+    accessTokenExpiresIn?: number;
+    /** refresh_token 过期秒数, 默认 2592000 (30d) */
+    refreshTokenExpiresIn?: number;
+    /** link_code 过期秒数, 默认 600 (10min) */
+    linkCodeExpiresIn?: number;
+}
+export interface OAuthBridgeDeps {
+    router: Router;
+    db: Database.Database;
+}
+/**
+ * 创建 OAuth bridge router
+ *
+ * 实战锁版: 自动跑 migrations (runOAuthBridgeMigrations), fail loud if failed
+ */
+export declare function createOAuthBridgeRouter(config: OAuthBridgeConfig): OAuthBridgeDeps;
+export { runOAuthBridgeMigrations } from '../db/oauth-migrate';
+export type { OAuthPlatform, OAuthBridgeClaims } from '../utils/jwt';
+//# sourceMappingURL=oauth-bridge.d.ts.map

package/api/oauth-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-bridge.d.ts","sourceRoot":"","sources":["../../src/api/oauth-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,QAAQ,GAAG,QAAQ,gBAAgB,CAAC,CAAC;AAe5C,OAAO,EACL,oBAAoB,EAGrB,MAAM,kBAAkB,CAAC;AAK1B,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sBAAsB;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2CAA2C;IAC3C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qCAAqC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACvB;AAID;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,eAAe,CAukBlF;AAiLD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}