docs: 移动蓝绿部署指南到 troubleshooting 目录

backend/app/utils/token_manager.py

@@ -18,6 +18,79 @@ from app.config import settings
 logger = logging.getLogger(__name__)
 
 
+class ApprovalTokenManager:
+    """企微审批应用 access_token 缓存管理器。
+
+    专门用于审批应用的token管理，支持不同的Secret。
+    使用独立的Redis缓存key，与普通应用token隔离。
+
+    Attributes:
+        redis: Redis 异步客户端
+        corp_id: 企业ID
+        corp_secret: 审批应用Secret
+    """
+
+    # 独立的Redis缓存key
+    CACHE_KEY = "wecom:approval_access_token"
+    TOKEN_EXPIRES = 7200
+    BUFFER_SECONDS = 300
+
+    def __init__(self, redis_client: aioredis.Redis, corp_secret: str = None):
+        """初始化审批token管理器。
+
+        Args:
+            redis_client: Redis 异步客户端实例
+            corp_secret: 审批应用Secret，默认从settings读取
+        """
+        self.redis = redis_client
+        self.corp_id = settings.wecom_corp_id
+        self.corp_secret = corp_secret or settings.wecom_approval_secret
+        self.client = httpx.AsyncClient(timeout=httpx.Timeout(connect=5.0, read=10.0))
+
+    async def get_token(self) -> str:
+        """获取审批应用的 access_token。"""
+        cached = await self.redis.get(self.CACHE_KEY)
+        if cached:
+            logger.debug("从缓存获取审批 access_token")
+            return cached.decode("utf-8")
+        return await self._refresh_token()
+
+    async def _refresh_token(self) -> str:
+        """调用企微 API 刷新审批 access_token。"""
+        logger.info("刷新审批 access_token")
+        url = "https://qyapi.weixin.qq.com/cgi-bin/gettoken"
+        params = {
+            "corpid": self.corp_id,
+            "corpsecret": self.corp_secret,
+        }
+
+        try:
+            response = await self.client.get(url, params=params)
+            result = response.json()
+
+            if result.get("errcode") != 0:
+                error_msg = result.get("errmsg", "未知错误")
+                logger.error(f"获取审批 access_token 失败: {error_msg}")
+                raise Exception(f"企微API错误: {error_msg}")
+
+            access_token = result["access_token"]
+            expires_in = result.get("expires_in", self.TOKEN_EXPIRES)
+
+            cache_ttl = max(expires_in - self.BUFFER_SECONDS, 60)
+            await self.redis.setex(self.CACHE_KEY, cache_ttl, access_token)
+
+            logger.info(f"审批 access_token 刷新成功，TTL={cache_ttl}秒")
+            return access_token
+
+        except httpx.HTTPError as e:
+            logger.error(f"获取审批 access_token 网络错误: {e}")
+            raise Exception(f"网络错误: {e}") from e
+
+    async def close(self) -> None:
+        """关闭 HTTP 客户端。"""
+        await self.client.aclose()
+
+
 class TokenManager:
     """企微 access_token 缓存管理器。