import os import time import json from flask import Flask, request, jsonify, redirect import requests import base64 import hashlib from OaConfig import TOKEN_STORE_FILE app = Flask(__name__) # 全局变量缓存token和配置 token_data = {} APP_ID = None APP_SECRET = None REDIRECT_URI = None code_verifier = None def save_token(app_id, data): store = {} if os.path.exists(TOKEN_STORE_FILE): with open(TOKEN_STORE_FILE, "r") as f: store = json.load(f) store[app_id] = data with open(TOKEN_STORE_FILE, "w") as f: json.dump(store, f) def load_token(app_id): if os.path.exists(TOKEN_STORE_FILE): with open(TOKEN_STORE_FILE, "r") as f: store = json.load(f) return store.get(app_id, {}) return {} def ensure_token_valid(): global token_data now = time.time() if not token_data or not token_data.get("access_token") or now > token_data.get("expires_at", 0): print("[ensure_token_valid] Access token expired or missing, try refresh token...") if not refresh_access_token(): print("[ensure_token_valid] Refresh token failed, need user authorization") return False return True def refresh_access_token(): global token_data, APP_ID, APP_SECRET if not token_data.get("refresh_token"): print("[refresh_access_token] No refresh_token available") return False resp = requests.post( "https://open.feishu.cn/open-apis/authen/v2/oauth/token", json={ "grant_type": "refresh_token", "client_id": APP_ID, "client_secret": APP_SECRET, "refresh_token": token_data["refresh_token"] } ) data = resp.json() print(f"[refresh_access_token] Response: {data}") if data.get("code") == 0: token_data["access_token"] = data["access_token"] token_data["refresh_token"] = data["refresh_token"] token_data["expires_at"] = time.time() + data["expires_in"] - 60 save_token(APP_ID, token_data) print("[refresh_access_token] Refresh success") return True else: print("[refresh_access_token] Refresh failed") return False def generate_code_verifier(): # 生成随机字符串作为 code_verifier return base64.urlsafe_b64encode(os.urandom(32)).rstrip(b'=').decode('utf-8') def generate_code_challenge(code_verifier): # 对 code_verifier 做 sha256，再 base64 urlsafe 编码得到 code_challenge sha256 = hashlib.sha256(code_verifier.encode('utf-8')).digest() return base64.urlsafe_b64encode(sha256).rstrip(b'=').decode('utf-8') @app.route("/pkce", methods=["GET"]) def get_pkce(): code_verifier = generate_code_verifier() code_challenge = generate_code_challenge(code_verifier) return jsonify({ "code_verifier": code_verifier, "code_challenge": code_challenge }) @app.route("/oauth/callback") def oauth_callback(): global token_data, APP_ID, APP_SECRET, REDIRECT_URI, code_verifier code = request.args.get("code") state = request.args.get("state") if not code: return jsonify({"error": "Missing code param"}), 400 if not all([APP_ID, APP_SECRET, REDIRECT_URI, code_verifier]): return jsonify({"error": "Missing config parameters"}), 400 # 用code换token resp = requests.post( "https://open.feishu.cn/open-apis/authen/v2/oauth/token", json={ "grant_type": "authorization_code", "client_id": APP_ID, "client_secret": APP_SECRET, "code": code, "redirect_uri": REDIRECT_URI, "code_verifier": code_verifier } ) data = resp.json() print(f"[oauth_callback] token response: {data}") if data.get("code") == 0: token_data = { "access_token": data["access_token"], "refresh_token": data["refresh_token"], "expires_at": time.time() + data["expires_in"] - 60 } save_token(APP_ID, token_data) return "授权成功！请关闭此窗口。" else: return jsonify({"error": "Token获取失败", "raw": data}), 400 @app.route("/set_config", methods=["POST"]) def set_config(): global APP_ID, APP_SECRET, REDIRECT_URI, code_verifier, token_data data = request.get_json(force=True) APP_ID = data.get("APP_ID") APP_SECRET = data.get("APP_SECRET") REDIRECT_URI = data.get("REDIRECT_URI") code_verifier = data.get("code_verifier") if not all([APP_ID, APP_SECRET, REDIRECT_URI, code_verifier]): return jsonify({"error": "缺少必要参数 APP_ID, APP_SECRET, REDIRECT_URI 或 code_verifier"}), 400 # 读取之前保存的token token_data = load_token(APP_ID) return jsonify({"message": "配置成功", "token_data": token_data}) @app.route("/calendar_events", methods=["POST"]) def calendar_events(): global APP_ID, APP_SECRET, token_data if not all([APP_ID, APP_SECRET]): return jsonify({"error": "请先调用 /set_config 设置参数"}), 400 if not ensure_token_valid(): # 引导用户去授权页面 auth_url = ( f"https://accounts.feishu.cn/open-apis/authen/v1/authorize" f"?client_id={APP_ID}" f"&redirect_uri={REDIRECT_URI}" f"&scope=calendar:calendar.event:read calendar:calendar:readonly offline_access" f"&state=auth" f"&code_challenge=YOUR_CODE_CHALLENGE" # 需要用你的code_challenge替换 f"&code_challenge_method=S256" ) return jsonify({ "message": "请先授权", "auth_url": auth_url }), 401 headers = { "Authorization": f"Bearer {token_data['access_token']}" } resp = requests.get("https://open.feishu.cn/open-apis/calendar/v4/calendars", headers=headers) data = resp.json() if data.get("code") != 0: return jsonify({"error": "获取日历列表失败", "raw": data}), 500 calendars = data.get("data", {}).get("calendar_list", []) events_all = [] for calendar in calendars: calendar_id = calendar["calendar_id"] ev_resp = requests.get( f"https://open.feishu.cn/open-apis/calendar/v4/calendars/{calendar_id}/events", headers=headers ) ev_data = ev_resp.json() if ev_data.get("code") != 0: continue events = ev_data.get("data", {}).get("items", []) events_all.extend(events) return jsonify({"events": events_all}) if __name__ == "__main__": app.run(port=8888, debug=True)