alist-org / alist

🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序,使用 Gin 和 Solidjs。
https://alist.nn.ci
GNU Affero General Public License v3.0
39.38k stars 5.11k forks source link

能否支持 OAuth 2.0 + PKCE 方式 #6549

Closed qy527145 closed 1 month ago

qy527145 commented 1 month ago

Please make sure of the following things

Description of the feature / 需求描述

我想搭个alist服务用于多账户聚合(大概30多个号) 但是我注意到refresh_token换access_token的接口针对ip有限制调用频率 alist能否在开放平台配置一下支持PKCE的方式,这样可以自己请求阿里云盘的token刷新接口

Suggested solution / 实现思路

No response

Additional context / 附件

No response

welcome[bot] commented 1 month ago

Thanks for opening your first issue here! Be sure to follow the issue template!

qy527145 commented 1 month ago

有部分账号在换access_token时429了 image

anwen-anyi commented 1 month ago

..... 你这是薅羊毛大户吧 :joy_cat:

pongfcnkl commented 1 month ago

https://github.com/520yxl/Aliyundrive_Refresh_Token_php

xhofe commented 1 month ago

添加存储时填上自己的client 清空Oauth令牌链接就行

qy527145 commented 1 month ago

添加存储时填上自己的client 清空Oauth令牌链接就行

这个需要自己申请阿里云盘Open 客户端吧 我还有个办法绕过接口频率限制,就是用一个代理池中转https://api.nn.ci/alist/ali_open/token接口

qy527145 commented 1 month ago

https://github.com/520yxl/Aliyundrive_Refresh_Token_php

这个其实还是得知道client_secret

qy527145 commented 1 month ago

..... 你这是薅羊毛大户吧 😹

才30个号,小户小户[doge]

qy527145 commented 1 month ago

能否把https://api.nn.ci/alist/ali_open/token接口的频率限制调大一些,比如30次/2小时,因为access_token的过期时间也是2个小时,这样应该更合理一些

anwen-anyi commented 1 month ago

..... 你这是薅羊毛大户吧 😹

才30个号,小户小户[doge]

属于灰/黑产用途了~ 哈哈 :joy_cat:

pongfcnkl commented 1 month ago

https://github.com/520yxl/Aliyundrive_Refresh_Token_php

这个其实还是得知道client_secret

那你自己申请呗

qy527145 commented 1 month ago

已解决,不小心绕过了请求频率限制