POST https://microcosm.money/api/oauth/token
Content-Type: application/json

{
  "grant_type": "authorization_code",
  "code": "<authorization_code>",
  "redirect_uri": "https://doublehelix.money/auth/callback",
  "client_id": "doublehelix",
  "client_secret": "<client_secret>"
}

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refresh_token": "dGhpcyBpcyBhIHJlZnJlc2ggdG9rZW4...",
  "token_type": "Bearer",
  "expires_in": 3600,
  "scope": "openid profile email mcc:read",
  "user": {
    "uid": "abc123",
    "email": "user@example.com",
    "display_name": "User Name",
    "role": "user",
    "level": "miner",
    "title": "commander",
    "station_id": 1
  }
}

POST https://microcosm.money/api/oauth/token
Content-Type: application/json

{
  "grant_type": "refresh_token",
  "refresh_token": "<refresh_token>",
  "client_id": "doublehelix",
  "client_secret": "<client_secret>"
}

{
  "access_token": "<new_access_token>",
  "refresh_token": "<new_refresh_token>",
  "token_type": "Bearer",
  "expires_in": 3600
}

POST https://microcosm.money/api/oauth/introspect

POST http://user-service.microcosm.svc.cluster.local/oauth/introspect

POST /oauth/introspect
Content-Type: application/json

{
  "token": "<access_token>"
}

{
  "active": true,
  "uid": "abc123",
  "email": "user@example.com",
  "display_name": "User Name",
  "role": "user",
  "level": "miner",
  "title": "commander",
  "station_id": 1,
  "scope": "openid profile email mcc:read",
  "client_id": "doublehelix",
  "exp": 1703577600,
  "iat": 1703574000
}

{
  "active": false
}

 {
   "success": false,
   "error": "invalid_token",
   "message": "The access token has expired"
 }

cd /c/Microcosm/services/portal-service
gcloud builds submit --config=cloudbuild.yaml --region=asia-northeast1 .

gcloud secrets versions access latest --secret=firebase-api-key
echo "NEW_VALUE" | gcloud secrets versions add firebase-api-key --data-file=-

// 获取用户信息后的兼容处理
const responseData = await response.json()

// 格式1 (直接返回): {uid, email, role, level, title, station_id}
// 格式2 (包装返回): {success: true, user: {uid, email, role, level, title, station_id}}
const userData = responseData.user || responseData

// 使用用户数据
const { uid, role, level, title, station_id } = userData

interface User {
  uid: string
  email: string
  displayName?: string
  role: 'admin' | 'user' | 'agent'                                    // 系统角色
  level: 'recruit' | 'prospect' | 'miner'                             // 用户级别
  title?: 'commander' | 'pioneer' | 'warden' | 'admiral' | null       // 职级头衔
  stationId?: number                                                  // 所属 Station ID
}

// Token 交换响应包含 user_id
const tokenData = await tokenExchange(code)
// { access_token, refresh_token, expires_in, user_id }

// 获取用户信息
const userData = await fetchUserProfile(tokenData.access_token)

// 备选逻辑
const uid = userData.uid || tokenData.user_id

// ❌ 错误: 闭包可能捕获过时的 state
const fetchData = async () => {
  if (!user?.uid) return  // user 可能是旧值
}

// ✅ 正确: 将依赖值作为参数传递
const fetchData = async (uid: string) => {
  if (!uid) return
}

useEffect(() => {
  if (!user?.uid) return
  fetchData(user.uid)  // 直接传递当前值
}, [user])

console.log("[OAuth Callback] Token exchange success, access_token length:", token.length)
console.log("[OAuth Callback] Profile response:", responseData)
console.log("[OAuth Callback] Extracted user data:", userData)
console.log("[OAuth Callback] uid =", userData.uid)