授权回调域名在哪设置

// 配置OAuth客户端信息
const oauthConfig = {
  clientId: 'your-client-id',
  clientSecret: 'your-client-secret',
  authorizationUrl: 'https://provider.com/oauth/authorize',
  tokenUrl: 'https://provider.com/oauth/token',
  redirectUri: 'https://your-app.com/callback' // 授权回调域名
};

// 引导用户进行授权
function authorizeUser() {
  const scope = 'user_profile email';
  const state = generateRandomState();
  window.location.href = `${oauthConfig.authorizationUrl}?client_id=${oauthConfig.clientId}&redirect_uri=${encodeURIComponent(oauthConfig.redirectUri)}&scope=${encodeURIComponent(scope)}&state=${state}`;
}

// 处理回调请求
app.get('/callback', (req, res) => {
  const { code, state } = req.query;
  if (state !== expectedState) {
    // 处理状态不匹配的情况
    return res.status(400).send('Invalid state parameter');
  }
  // 使用授权码获取访问令牌
  fetch(oauthConfig.tokenUrl, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/x-www-form-urlencoded'
    },
    body: `grant_type=authorization_code&code=${code}&redirect_uri=${encodeURIComponent(oauthConfig.redirectUri)}&client_id=${oauthConfig.clientId}&client_secret=${oauthConfig.clientSecret}`
  })
  .then(response => response.json())
  .then(data => {
    // 处理访问令牌
    const accessToken = data.access_token;
    // 使用访问令牌进行后续操作
  })
  .catch(error => {
    console.error('Error fetching access token:', error);
  });
});