SSO 鉴权接口文档

curl -X GET "https://yzztcl.cn/api/sso/check-login" \
  -H "X-Client-Id: your-client-id" \
  -H "X-Client-Secret: your-client-secret" \
  -H "Cookie: nova_session=your-session-cookie"

curl -X GET "https://yzztcl.cn/api/sso/user-info" \
  -H "X-Client-Id: your-client-id" \
  -H "X-Client-Secret: your-client-secret" \
  -H "Cookie: nova_session=your-session-cookie"

curl -X POST "https://yzztcl.cn/api/sso/login" \
  -H "X-Client-Id: your-client-id" \
  -H "X-Client-Secret: your-client-secret" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "username=admin&password=your-password"

curl -X POST "https://yzztcl.cn/api/sso/logout" \
  -H "X-Client-Id: your-client-id" \
  -H "X-Client-Secret: your-client-secret" \
  -H "Cookie: nova_session=your-session-cookie"

curl -X POST "https://yzztcl.cn/api/sso/token/generate" \
  -H "X-Client-Id: your-client-id" \
  -H "X-Client-Secret: your-client-secret" \
  -H "Cookie: nova_session=your-session-cookie"

curl -X POST "https://yzztcl.cn/api/sso/token/verify" \
  -H "X-Client-Id: your-client-id" \
  -H "X-Client-Secret: your-client-secret" \
  -H "X-Access-Token: your-access-token"

class SsoClient {
    constructor(clientId, clientSecret) {
        this.clientId = clientId;
        this.clientSecret = clientSecret;
        this.baseUrl = 'https://yzztcl.cn/api/sso';
    }

    async request(method, path, data = {}) {
        const options = {
            method: method.toUpperCase(),
            headers: {
                'X-Client-Id': this.clientId,
                'X-Client-Secret': this.clientSecret,
                'Content-Type': 'application/x-www-form-urlencoded'
            },
            credentials: 'include'
        };

        if (method.toLowerCase() === 'post') {
            options.body = new URLSearchParams(data);
        }

        const response = await fetch(`${this.baseUrl}${path}`, options);
        return response.json();
    }

    async checkLogin() {
        return this.request('get', '/check-login');
    }

    async getUserInfo() {
        return this.request('get', '/user-info');
    }

    async login(username, password) {
        return this.request('post', '/login', { username, password });
    }

    async logout() {
        return this.request('post', '/logout');
    }

    async generateToken() {
        return this.request('post', '/token/generate');
    }

    async verifyToken(token) {
        const options = {
            method: 'POST',
            headers: {
                'X-Client-Id': this.clientId,
                'X-Client-Secret': this.clientSecret,
                'X-Access-Token': token
            }
        };
        const response = await fetch(`${this.baseUrl}/token/verify`, options);
        return response.json();
    }
}

// 使用示例
const sso = new SsoClient('your-client-id', 'your-client-secret');

// 登录
const loginResult = await sso.login('admin', 'password');
if (loginResult.success) {
    console.log('登录成功:', loginResult.data);
    
    // 获取用户信息
    const userInfo = await sso.getUserInfo();
    console.log('用户信息:', userInfo.data);
}

<?php
class SsoClient {
    private $clientId;
    private $clientSecret;
    private $baseUrl;

    public function __construct($clientId, $clientSecret) {
        $this->clientId = $clientId;
        $this->clientSecret = $clientSecret;
        $this->baseUrl = 'https://yzztcl.cn/api/sso';
    }

    private function request($method, $path, $data = []) {
        $url = $this->baseUrl . $path;
        $ch = curl_init($url);
        
        curl_setopt($ch, CURLOPT_HTTPHEADER, [
            'X-Client-Id: ' . $this->clientId,
            'X-Client-Secret: ' . $this->clientSecret
        ]);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_COOKIESESSION, true);
        curl_setopt($ch, CURLOPT_COOKIEJAR, '/tmp/sso_cookies.txt');
        curl_setopt($ch, CURLOPT_COOKIEFILE, '/tmp/sso_cookies.txt');

        if (strtoupper($method) === 'POST') {
            curl_setopt($ch, CURLOPT_POST, true);
            curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($data));
        }

        $response = curl_exec($ch);
        curl_close($ch);
        
        return json_decode($response, true);
    }

    public function checkLogin() {
        return $this->request('GET', '/check-login');
    }

    public function getUserInfo() {
        return $this->request('GET', '/user-info');
    }

    public function login($username, $password) {
        return $this->request('POST', '/login', [
            'username' => $username,
            'password' => $password
        ]);
    }

    public function logout() {
        return $this->request('POST', '/logout');
    }

    public function generateToken() {
        return $this->request('POST', '/token/generate');
    }

    public function verifyToken($token) {
        $url = $this->baseUrl . '/token/verify';
        $ch = curl_init($url);
        
        curl_setopt($ch, CURLOPT_HTTPHEADER, [
            'X-Client-Id: ' . $this->clientId,
            'X-Client-Secret: ' . $this->clientSecret,
            'X-Access-Token: ' . $token
        ]);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        
        $response = curl_exec($ch);
        curl_close($ch);
        
        return json_decode($response, true);
    }
}

// 使用示例
$sso = new SsoClient('your-client-id', 'your-client-secret');

// 登录
$loginResult = $sso->login('admin', 'password');
if ($loginResult['success']) {
    echo '登录成功' . PHP_EOL;
    
    // 获取用户信息
    $userInfo = $sso->getUserInfo();
    print_r($userInfo['data']);
}
?>

import requests

class SsoClient:
    def __init__(self, client_id, client_secret):
        self.client_id = client_id
        self.client_secret = client_secret
        self.base_url = 'https://yzztcl.cn/api/sso'
        self.session = requests.Session()
    
    def _request(self, method, path, data=None):
        url = f"{self.base_url}{path}"
        headers = {
            'X-Client-Id': self.client_id,
            'X-Client-Secret': self.client_secret
        }
        
        if method.upper() == 'GET':
            response = self.session.get(url, headers=headers)
        else:
            response = self.session.post(url, headers=headers, data=data)
        
        return response.json()
    
    def check_login(self):
        return self._request('GET', '/check-login')
    
    def get_user_info(self):
        return self._request('GET', '/user-info')
    
    def login(self, username, password):
        return self._request('POST', '/login', {
            'username': username,
            'password': password
        })
    
    def logout(self):
        return self._request('POST', '/logout')
    
    def generate_token(self):
        return self._request('POST', '/token/generate')
    
    def verify_token(self, token):
        url = f"{self.base_url}/token/verify"
        headers = {
            'X-Client-Id': self.client_id,
            'X-Client-Secret': self.client_secret,
            'X-Access-Token': token
        }
        response = requests.post(url, headers=headers)
        return response.json()

# 使用示例
sso = SsoClient('your-client-id', 'your-client-secret')

# 登录
login_result = sso.login('admin', 'password')
if login_result['success']:
    print('登录成功')
    
    # 获取用户信息
    user_info = sso.get_user_info()
    print(user_info['data'])