使用Mojolicious实现基于OAuth 2.0的认证授权

本示例展示了如何使用Mojolicious框架实现基于OAuth 2.0协议的认证授权功能，包括OAuth认证与授权码的获取、AccessToken的刷新、以及资源服务器的保护等。

# 启用Mojolicious插件
use Mojolicious::Lite;
use Mojolicious::Plugin::OAuth2;

# 注册OAuth2客户端信息
app->oauth2->client(
    id => 'your_client_id',
    secret => 'your_client_secret',
    name => 'your_client_name',
    site => 'http://your_oauth_server',
    authorize_url => '/oauth2/authorize',
    token_url => '/oauth2/access_token',
    refresh_url => '/oauth2/refresh_token'
);

# 获取授权码
get '/oauth2/authorize' => sub {
    my $c = shift;
    my $authorize_url = $c->oauth2->authorization_url(
        redirect_uri => 'http://localhost:3000/oauth2/callback',
        scope => 'openid profile email'
    );
    $c->redirect_to($authorize_url);
};

# OAuth回调处理
get '/oauth2/callback' => sub {
    my $c = shift;
    my $code = $c->param('code');
    my $access_token = $c->oauth2->get_access_token($code);
    my $refresh_token = $c->oauth2->get_refresh_token($code);
    $c->render(text => "Access Token: $access_token\nRefresh Token: $refresh_token");
};

# AccessToken刷新处理
get '/oauth2/refresh_token' => sub {
    my $c = shift;
    my $refresh_token = $c->param('refresh_token');
    my $new_access_token = $c->oauth2->refresh_access_token($refresh_token);
    $c->render(text => "New Access Token: $new_access_token");
};

# Token保护访问
get '/protected_resource' => sub {
    my $c = shift;
    my $access_token = $c->req->headers->authorization;
    my $valid = $c->oauth2->verify_access_token($access_token);
    if ($valid) {
        $c->render(text => 'Secret resource is here...');
    }
    else {
        $c->render(text => 'Access denied...', status => 401);
    }
};

app->start;

免责申明：文章和图片全部来源于公开网络，如有侵权，请通知删除 server@dude6.com