oapi-sdk-go icon indicating copy to clipboard operation
oapi-sdk-go copied to clipboard

Published 20 hours ago • verified publisher icon larksuite

tokenmanager.appAccessTokenKey(appID)为固定参数，导致NewClient验证第二次传入的错误appsecret时绕过了服务端请求

Open yayayahei opened this issue 11 months ago • 1 comments

image problem: tokenmanager.appAccessTokenKey(appID)为固定参数，localCache为全局变量，appID对应的缓存不过期时，NewClient(appID,wrongSecret)，导致验证wrongSecret成功

want: tokenmanager.appAccessTokenKey(appID) 加上随机码参数，通过client option传递进来，防止appID token被复用

yayayahei avatar Mar 04 '24 12:03 yayayahei