bocai-cli-core 0.2.0__py3-none-any.whl

bocai_cli/commands/auth.py

@@ -0,0 +1,211 @@
+from __future__ import annotations
+
+from datetime import datetime, timedelta, timezone
+
+import typer
+
+from bocai_cli.api import ApiFacade
+from bocai_cli.command_utils import command_handler
+from bocai_cli.config import load_config, save_config
+from bocai_cli.errors import ConfigValidationError
+from bocai_cli.output import print_json
+
+app = typer.Typer(help="鉴权相关命令。", invoke_without_command=True)
+
+
+@app.callback()
+def auth_root(ctx: typer.Context) -> None:
+    if ctx.invoked_subcommand is None:
+        typer.echo(ctx.get_help())
+        raise typer.Exit(code=0)
+
+
+def _build_api() -> ApiFacade:
+    config = load_config()
+    return ApiFacade(
+        base_url=config.base_url,
+        token=config.token,
+        timeout_seconds=config.timeout_seconds,
+    )
+
+
+def _now_utc() -> datetime:
+    return datetime.now(timezone.utc)
+
+
+def _save_token(config, new_token: str):
+    previous_token = config.token
+    if previous_token and previous_token != new_token:
+        config.token_backup = previous_token
+
+    config.token = new_token
+    config.token_updated_at = _now_utc().isoformat()
+    return save_config(config)
+
+
+def _extract_token_field(payload: object, *fields: str) -> str | None:
+    if isinstance(payload, dict):
+        for field in fields:
+            value = payload.get(field)
+            if isinstance(value, str) and value.strip():
+                return value.strip()
+    return None
+
+
+def _extract_access_token(payload: object) -> str | None:
+    return _extract_token_field(payload, "accessToken", "access_token")
+
+
+def _save_token_payload(config, payload: object):
+    new_token = _extract_access_token(payload)
+    if new_token is None:
+        return None
+
+    refresh_token = _extract_token_field(payload, "refreshToken", "refresh_token")
+    expires_at = _extract_token_field(payload, "expiresAt", "expires_at")
+    if refresh_token is not None:
+        config.refresh_token = refresh_token
+    if expires_at is not None:
+        config.expires_at = expires_at
+    return _save_token(config, new_token)
+
+
+def _parse_expires_at(raw_expires_at: str | None) -> datetime | None:
+    if raw_expires_at is None:
+        return None
+
+    value = raw_expires_at.strip()
+    if not value:
+        return None
+
+    if value.endswith("Z"):
+        value = f"{value[:-1]}+00:00"
+
+    try:
+        expires_at = datetime.fromisoformat(value)
+    except ValueError:
+        return None
+
+    if expires_at.tzinfo is None:
+        return expires_at.replace(tzinfo=timezone.utc)
+    return expires_at.astimezone(timezone.utc)
+
+
+def _should_refresh_token(raw_expires_at: str | None) -> bool:
+    expires_at = _parse_expires_at(raw_expires_at)
+    if expires_at is None:
+        return True
+    return expires_at <= _now_utc() + timedelta(days=7)
+
+
+#@app.command("login", help="登录并获取accessToken")
+#@command_handler
+def login() -> None:
+    config = load_config()
+    required_fields = ["base_url", "app_id", "secret"]
+    missing = [field for field in required_fields if not getattr(config, field)]
+    if missing:
+        raise ConfigValidationError(
+            "配置缺少获取 token 所需字段。",
+            details={"missing": missing},
+        )
+
+    api = _build_api()
+    new_token = api.auth.fetch_access_token(
+        token_url=config.token_url or "/api/auth/token",
+        app_id=config.app_id or "",
+        secret=config.secret or "",
+    )
+
+    config_path = _save_token(config, new_token)
+
+    print_json(
+        {
+            "status": "ok",
+            "message": "登录成功，token 已更新。",
+            "token_updated": True,
+            "config_path": str(config_path),
+        }
+    )
+
+
+@app.command("start", help="开始授权绑定流程")
+@command_handler
+def start() -> None:
+    api = _build_api()
+    data = api.auth.start()
+    print_json({"status": "ok", "data": data})
+
+
+@app.command("check-status", help="检查授权绑定状态")
+@command_handler
+def check_status(
+    auth_code: str = typer.Option(
+        ...,
+        "--auth-code",
+        help="授权码。",
+    ),
+) -> None:
+    api = _build_api()
+    data = api.auth.check_status(auth_code=auth_code)
+    config = load_config()
+    config_path = _save_token_payload(config, data)
+    if config_path is None:
+        print_json({"status": "ok", "data": data, "token_updated": False})
+        return
+
+    print_json(
+        {
+            "status": "ok",
+            "data": data,
+            "token_updated": True,
+            "config_path": str(config_path),
+        }
+    )
+
+
+@app.command("refresh-token", help="刷新授权 token")
+@command_handler
+def refresh_token() -> None:
+    config = load_config()
+
+    if not _should_refresh_token(config.expires_at):
+        print_json(
+            {
+                "status": "ok",
+                "token_updated": False,
+                "refresh_skipped": True,
+                "reason": "token_not_expiring_soon",
+            }
+        )
+        return
+
+    missing = [
+        field
+        for field in ("token", "refresh_token")
+        if not getattr(config, field)
+    ]
+    if missing:
+        raise ConfigValidationError(
+            "配置缺少刷新 token 所需字段。",
+            details={"missing": missing},
+        )
+
+    api = _build_api()
+    data = api.auth.refresh_user_token(
+        access_token=config.token or "",
+        refresh_token=config.refresh_token or "",
+    )
+    config_path = _save_token_payload(config, data)
+    if config_path is None:
+        print_json({"status": "ok", "data": data, "token_updated": False})
+        return
+
+    print_json(
+        {
+            "status": "ok",
+            "data": data,
+            "token_updated": True,
+            "config_path": str(config_path),
+        }
+    )