OSC 的 openapi 拿 code 获取 AccessToken 时返回 ?400报错

OSC 的 openapi 拿 code 获取 AccessToken 时返回 Invalid authorization code: hzmng9? 400 报错

1. 通过这个接口 /action/oauth2/authorize 的回调，得到的code是 hzmng9

2. 使用这个 code 请求接口 /action/openapi/token 时，得到的返回信息是 {"error_description":"Invalid authorization code: hzmng9","error":"400"}

我看别人发帖中所说的 OSC 的openapi 得到的 code 都没有这么短的。怀疑是否OSC 这边有bug。

下面是在chrome里提取到的信息（第一次接口请求）

Request URL:https://www.oschina.net/action/oauth2/authorize
Request Method:POST
Status Code:302 Found
Remote Address:218.60.112.57:443

HTTP/1.1 302 Found
Server: Tengine
Date: Tue, 17 May 2016 17:33:10 GMT
Content-Type: text/html;charset=utf-8
Content-Length: 0
Connection: keep-alive
Keep-Alive: timeout=20
Location: http://jsmind.sinaapp.com/user/login/oschina/success?code=hzmng9&state=jsmind

POST /action/oauth2/authorize HTTP/1.1
Host: www.oschina.net
Connection: keep-alive
Content-Length: 185
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: https://www.oschina.net
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: https://www.oschina.net/action/oauth2/authorize?response_type=code&client_id=tcEfs*****hidden*****yjHVl&state=jsmind&redirect_uri=http%3A%2F%2Fjsmind.sinaapp.com%2Fuser%2Flogin%2Foschina%2Fsuccess
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.6
Cookie: oscid=EM9FBSUtcEfs*****hidden*****yjHVlsIy9RU4DtH; aliyungf_tc=AQAA*****hidden*****X0uQ5

client_id:tcEfs*****hidden*****yjHVl
response_type:code
redirect_uri:http://jsmind.sinaapp.com/user/login/oschina/success
scope:user_api,
state:jsmind
user_oauth_approval:true

第二次接口

request_url = 'https://www.oschina.net/action/openapi/token'
request_data = {
    'client_id' : OAUTH_OSCHINA_CLIENTID,
    'client_secret' : OAUTH_OSCHINA_CLIENTSECRET,
    'grant_type' : 'authorization_code',
    'redirect_uri' : 'http://jsmind.sinaapp.com/',
    'code' : 'hzmng9', 
    'dataType' : 'json'
}   
request_header = {
    'User-Agent' : 'Mozilla/5.0'
}
req = urllib2.Request(request_url, urllib.urlencode(request_data), headers=request_header)
resp = urllib2.urlopen(req).read()
print(resp)

# 输出
{"error_description":"Invalid authorization code: hzmng9","error":"400"}

不知道是否有其他人碰到相同的问题没有。