proxy_access_token.lua

local modname = "wechat_proxy_access_token"
local _M = { _VERSION = '0.0.1' }
_G[modname] = _M

local ngx_log       = ngx.log
local ngx_timer_at  = ngx.timer.at

local cjson = require("cjson")

local updateurl = "https://api.weixin.qq.com/cgi-bin/token"
local updateparam = {
  method = "GET",
  query = {
    grant_type = "client_credential",
    appid = wechat_config.appid,
    secret = wechat_config.appsecret,
  },
  ssl_verify = false,
  headers = { ["Content-Type"] = "application/x-www-form-urlencoded" },
}

local ticketurl = "https://api.weixin.qq.com/cgi-bin/ticket/getticket"
local ticketparam = {
  method = "GET",
  query = {
    type = "jsapi",
  },
  ssl_verify = false,
  headers = { ["Content-Type"] = "application/x-www-form-urlencoded" },
}

local updateTime = wechat_config.accessTokenUpdateTime or 6000
local pollingTime = wechat_config.accessTokenPollingTime or 600
local accessTokenKey = wechat_config.accessTokenKey or wechat_config.appid
local jsapiTicketKey = wechat_config.jsapiTicketKey or (wechat_config.appid .. "_ticket")

local mt = {
  __call = function(_)
    local updateAccessToken
    updateAccessToken = function()
      require("resty.wechat.utils.redis"):connect(wechat_config.redis):lockProcess(
        "accessTokenLocker",
        function(weredis)
          if 0 < tonumber(weredis.redis:ttl(accessTokenKey) or 0) then
            return
          end

          -- access_token time out, refresh
          local res, err = require("resty.wechat.utils.http").new():request_uri(updateurl, updateparam)
          if not res or err or tostring(res.status) ~= "200" then
            ngx_log(ngx.ERR, "failed to update access token: ", err or tostring(res.status))
            return
          end
          local resbody = cjson.decode(res.body)
          if not resbody.access_token then
            ngx_log(ngx.ERR, "failed to update access token: ", res.body)
            return
          end

          local ok, err = weredis.redis:setex(accessTokenKey, updateTime - 1, resbody.access_token)
          if not ok then
            ngx_log(ngx.ERR, "failed to set access token: ", err)
            return
          end

          ngx_log(ngx.NOTICE, "succeed to set access token: ", res.body)

          -- refresh jsapi_ticket after refresh access_token
          ticketparam.query.access_token = resbody.access_token
          local res, err = require("resty.wechat.utils.http").new():request_uri(ticketurl, ticketparam)
          ticketparam.query.access_token = nil
          if not res or err or tostring(res.status) ~= "200" then
            ngx_log(ngx.ERR, "failed to update jsapi ticket: ", err or tostring(res.status))
            return
          end
          local resbody = cjson.decode(res.body)
          if not resbody.ticket then
            ngx_log(ngx.ERR, "failed to update jsapi ticket: ", res.body)
            return
          end

          local ok, err = weredis.redis:setex(jsapiTicketKey, updateTime - 1, resbody.ticket)
          if not ok then
            ngx_log(ngx.ERR, "failed to set jsapi ticket: ", err)
            return
          end

          ngx_log(ngx.NOTICE, "succeed to set jsapi ticket: ", res.body)
        end
      )

      local ok, err = ngx_timer_at(pollingTime, updateAccessToken)
      if not ok then
        ngx_log(ngx.ERR, "failed to create the Access Token Updater: ", err)
        return
      end
    end

    local ok, err = ngx_timer_at(5, updateAccessToken)
    if not ok then
      ngx_log(ngx.ERR, "failed to create the Access Token Updater: ", err)
      return
    end
  end,
}

return setmetatable(_M, mt)