describe("QQBot token manager", () => {

afterEach(() => {

vi.unstubAllGlobals();

vi.useRealTimers();

});

it("wraps malformed access token JSON", async () => {

"QQBot access_token response was malformed JSON",

);

});

it("does not cache access tokens forever when expires_in is unsafe", async () => {

vi.useFakeTimers();

vi.setSystemTime(new Date("2026-05-29T12:00:00.000Z"));

vi.stubGlobal(

"fetch",

vi.fn().mockResolvedValue(

new Response('{"access_token":"token-1","expires_in":1e309}', {

status: 200,

headers: { "content-type": "application/json" },

}),

),

);

const manager = new TokenManager();

await expect(manager.getAccessToken("app-id", "secret")).resolves.toBe("token-1");

const status = manager.getStatus("app-id");

expect(status.status).toBe("valid");

expect(status.expiresAt).toBe(Date.now() + 7200 * 1000);

});

it("does not extend explicit non-positive token lifetimes", async () => {

vi.useFakeTimers();

vi.setSystemTime(new Date("2026-05-29T12:00:00.000Z"));

const fetch = vi.fn().mockResolvedValue(

new Response('{"access_token":"token-1","expires_in":0}', {

status: 200,

headers: { "content-type": "application/json" },

}),

);

vi.stubGlobal("fetch", fetch);

const manager = new TokenManager();

await expect(manager.getAccessToken("app-id", "secret")).resolves.toBe("token-1");

expect(manager.getStatus("app-id")).toEqual({

status: "expired",

expiresAt: Date.now(),

});

});

});

* globals, fully supporting multi-account concurrent operation.

*/

import { parseStrictPositiveInteger } from "openclaw/plugin-sdk/number-runtime";

import type { EngineLogger } from "../types.js";

import { formatErrorMessage } from "../utils/format.js";

const TOKEN_URL = "https://bots.qq.com/app/getAppAccessToken";

const DEFAULT_TOKEN_EXPIRES_IN_SECONDS = 7200;

interface CachedToken {

token: string;

retryDelayMs?: number;

}

function resolveTokenExpiresInSeconds(value: unknown): number {

const parsed = parseStrictPositiveInteger(value);

if (parsed !== undefined) {

return parsed;

}

if (value == null || (typeof value === "number" && !Number.isFinite(value))) {

return DEFAULT_TOKEN_EXPIRES_IN_SECONDS;

}

return 0;

}

/**

* Per-appId token manager with caching, singleflight, and background refresh.

*

const logBody = rawBody.replace(/"access_token"\s*:\s*"[^"]+"/g, '"access_token": "***"');

this.logger?.debug?.(`[qqbot:token:${appId}] <<< Body: ${logBody}`);

let data: { access_token?: string; expires_in?: number };

let data: { access_token?: string; expires_in?: unknown };

try {

data = JSON.parse(rawBody);

} catch {

throw new Error(`Failed to get access_token: ${JSON.stringify(data)}`);

}

const expiresAt = Date.now() + (data.expires_in ?? 7200) * 1000;

const expiresAt = Date.now() + resolveTokenExpiresInSeconds(data.expires_in) * 1000;

this.cache.set(appId, { token: data.access_token, expiresAt, appId });

this.logger?.debug?.(

`[qqbot:token:${appId}] Cached, expires at: ${new Date(expiresAt).toISOString()}`,