66 lines
2.1 KiB
TypeScript
66 lines
2.1 KiB
TypeScript
import { getRuntimeEnv } from "../../../lib/runtime-env";
|
||
import {
|
||
exchangeWecomOAuthCode,
|
||
fetchWecomExternalContactName,
|
||
resolveWecomConfig,
|
||
WecomClientError,
|
||
type WecomBindings,
|
||
} from "../../../lib/wecom-client";
|
||
import { signWecomIdentityTicket } from "../../../lib/wecom-oauth-service";
|
||
import { partnerOptions, withPartnerCors } from "../../../lib/partner-cors";
|
||
|
||
const env = getRuntimeEnv();
|
||
|
||
export function OPTIONS(request: Request) {
|
||
return partnerOptions(request);
|
||
}
|
||
|
||
async function handlePost(request: Request) {
|
||
try {
|
||
const body = (await request.json().catch(() => ({}))) as { code?: string };
|
||
const code = String(body.code ?? "").trim();
|
||
const config = resolveWecomConfig(env as unknown as WecomBindings);
|
||
if (!config.corpId || !config.agentId || !config.secret) {
|
||
return Response.json(
|
||
{ error: "未配置企业微信授权（WECOM_CORP_ID / WECOM_AGENT_ID / WECOM_SECRET）" },
|
||
{ status: 501 },
|
||
);
|
||
}
|
||
if (!code) {
|
||
return Response.json({ error: "缺少授权 code" }, { status: 400 });
|
||
}
|
||
const identity = await exchangeWecomOAuthCode(config, code);
|
||
if (identity.externalUserId) {
|
||
const displayName =
|
||
(await fetchWecomExternalContactName(config, identity.externalUserId)) ??
|
||
"企微客户";
|
||
const { ticket, expiresIn } = await signWecomIdentityTicket(
|
||
identity.externalUserId,
|
||
displayName,
|
||
);
|
||
return Response.json({
|
||
userType: "external",
|
||
identityTicket: ticket,
|
||
displayName,
|
||
expiresIn,
|
||
});
|
||
}
|
||
return Response.json({
|
||
userType: "internal",
|
||
userId: identity.userId ?? "",
|
||
});
|
||
} catch (error) {
|
||
const status = error instanceof WecomClientError ? error.status : 500;
|
||
return Response.json(
|
||
{ error: error instanceof Error ? error.message : "授权失败" },
|
||
{ status },
|
||
);
|
||
}
|
||
}
|
||
|
||
export async function POST(request: Request) {
|
||
const response = await handlePost(request);
|
||
response.headers.set("Cache-Control", "private, no-store");
|
||
return withPartnerCors(request, response);
|
||
}
|