{"id":121811,"date":"2026-11-03T18:57:05","date_gmt":"2026-11-03T10:57:05","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/121811.html"},"modified":"2026-11-03T18:57:05","modified_gmt":"2026-11-03T10:57:05","slug":"%e7%ac%ac-8-%e7%af%87%ef%bd%9cauthz%ef%bc%88%e5%9b%9b%ef%bc%89%ef%bc%9atoken-%e7%94%9f%e5%91%bd%e5%91%a8%e6%9c%9f%e3%80%81%e6%92%a4%e9%94%80%e4%b8%8e%e7%94%a8%e6%88%b7%e6%8e%88%e6%9d%83%e7%ae%a1","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/121811.html","title":{"rendered":"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3"},"content":{"rendered":"<p>\u7cfb\u5217&#xff1a;\u300a\u8ba9 AI \u66ff\u4f60\u529e\u94f6\u884c\u4e1a\u52a1&#xff1a;\u9762\u5411 MCP Connector \u7684\u8eab\u4efd\u8ba4\u8bc1\u4e0e\u6388\u6743\u8bbe\u8ba1\u300b \u89c4\u8303\u57fa\u7ebf&#xff1a;OAuth 2.1 draft-ietf-oauth-v2-1-13&#xff1b;RFC 7009&#xff1b;RFC 7662&#xff1b;OpenID Shared Signals Framework 1.0 \u4e0e CAEP 1.0&#xff08;Final&#xff0c;2025&#xff09;&#xff1b;MCP 2026-07-28 \u64b0\u5199\u65e5\u671f&#xff1a;2026-10-23<\/p>\n<hr \/>\n<h3>0. \u6388\u6743\u662f\u4e00\u4e2a\u6709\u751f\u547d\u7684\u5bf9\u8c61<\/h3>\n<p>\u5f88\u591a\u56e2\u961f\u628a OAuth \u6388\u6743\u5f53\u6210\u4e00\u6b21\u6027\u4e8b\u4ef6&#xff1a;\u7528\u6237\u70b9\u540c\u610f&#xff0c;\u62ff\u5230 token&#xff0c;\u7ed3\u675f\u3002\u5bf9 AI connector&#xff0c;\u8fd9\u6837\u7406\u89e3\u662f\u5371\u9669\u7684\u3002\u7528\u6237\u5728\u67d0\u4e2a\u5468\u672b\u4e0b\u5348\u6388\u6743\u4e86 Claude&#xff0c;\u4e4b\u540e\u53ef\u80fd\u51e0\u4e2a\u6708\u90fd\u60f3\u4e0d\u8d77\u6765\u8fd9\u4ef6\u4e8b&#xff0c;\u800c AI \u5e73\u53f0\u4f1a\u6301\u7eed\u66ff\u4ed6\u5237\u65b0 token\u3001\u8c03\u7528\u5de5\u5177\u3002<\/p>\n<p>\u6240\u4ee5\u6211\u4eec\u8981\u628a**\u6388\u6743&#xff08;grant&#xff09;**\u5f53\u4f5c\u4e00\u4e2a\u6709\u5b8c\u6574\u751f\u547d\u5468\u671f\u7684\u4e1a\u52a1\u5bf9\u8c61\u6765\u7ba1\u7406&#xff1a;\u5b83\u88ab\u5efa\u7acb\u3001\u88ab\u4f7f\u7528\u3001\u88ab\u7eed\u671f\u3001\u88ab\u6269\u5927\u6216\u7f29\u5c0f\u3001\u88ab\u6682\u505c\u3001\u88ab\u64a4\u9500\u3001\u6700\u7ec8\u8fc7\u671f\u3002\u6bcf\u4e00\u4e2a\u72b6\u6001\u53d8\u5316\u90fd\u8981\u80fd\u88ab\u7528\u6237\u770b\u89c1&#xff0c;\u5e76\u4e14\u80fd\u5b9e\u65f6\u5f71\u54cd\u6bcf\u4e00\u6b21\u5de5\u5177\u8c03\u7528\u3002<\/p>\n<hr \/>\n<h3>1. \u6388\u6743\u7684\u72b6\u6001\u673a<\/h3>\n<p>  #mermaid-svg-3huDZNWpgW9xm3Oa{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-3huDZNWpgW9xm3Oa .error-icon{fill:#552222;}#mermaid-svg-3huDZNWpgW9xm3Oa .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-3huDZNWpgW9xm3Oa .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-3huDZNWpgW9xm3Oa .marker{fill:#333333;stroke:#333333;}#mermaid-svg-3huDZNWpgW9xm3Oa .marker.cross{stroke:#333333;}#mermaid-svg-3huDZNWpgW9xm3Oa svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-3huDZNWpgW9xm3Oa p{margin:0;}#mermaid-svg-3huDZNWpgW9xm3Oa defs #statediagram-barbEnd{fill:#333333;stroke:#333333;}#mermaid-svg-3huDZNWpgW9xm3Oa g.stateGroup text{fill:#9370DB;stroke:none;font-size:10px;}#mermaid-svg-3huDZNWpgW9xm3Oa g.stateGroup text{fill:#333;stroke:none;font-size:10px;}#mermaid-svg-3huDZNWpgW9xm3Oa g.stateGroup .state-title{font-weight:bolder;fill:#131300;}#mermaid-svg-3huDZNWpgW9xm3Oa g.stateGroup rect{fill:#ECECFF;stroke:#9370DB;}#mermaid-svg-3huDZNWpgW9xm3Oa g.stateGroup line{stroke:#333333;stroke-width:1;}#mermaid-svg-3huDZNWpgW9xm3Oa .transition{stroke:#333333;stroke-width:1;fill:none;}#mermaid-svg-3huDZNWpgW9xm3Oa .stateGroup .composit{fill:white;border-bottom:1px;}#mermaid-svg-3huDZNWpgW9xm3Oa .stateGroup .alt-composit{fill:#e0e0e0;border-bottom:1px;}#mermaid-svg-3huDZNWpgW9xm3Oa .state-note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-3huDZNWpgW9xm3Oa .state-note text{fill:black;stroke:none;font-size:10px;}#mermaid-svg-3huDZNWpgW9xm3Oa .stateLabel .box{stroke:none;stroke-width:0;fill:#ECECFF;opacity:0.5;}#mermaid-svg-3huDZNWpgW9xm3Oa .edgeLabel .label rect{fill:#ECECFF;opacity:0.5;}#mermaid-svg-3huDZNWpgW9xm3Oa .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-3huDZNWpgW9xm3Oa .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-3huDZNWpgW9xm3Oa .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-3huDZNWpgW9xm3Oa .edgeLabel .label text{fill:#333;}#mermaid-svg-3huDZNWpgW9xm3Oa .label div .edgeLabel{color:#333;}#mermaid-svg-3huDZNWpgW9xm3Oa .stateLabel text{fill:#131300;font-size:10px;font-weight:bold;}#mermaid-svg-3huDZNWpgW9xm3Oa .node circle.state-start{fill:#333333;stroke:#333333;}#mermaid-svg-3huDZNWpgW9xm3Oa .node .fork-join{fill:#333333;stroke:#333333;}#mermaid-svg-3huDZNWpgW9xm3Oa .node circle.state-end{fill:#9370DB;stroke:white;stroke-width:1.5;}#mermaid-svg-3huDZNWpgW9xm3Oa .end-state-inner{fill:white;stroke-width:1.5;}#mermaid-svg-3huDZNWpgW9xm3Oa .node rect{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-3huDZNWpgW9xm3Oa .node polygon{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-3huDZNWpgW9xm3Oa #statediagram-barbEnd{fill:#333333;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-cluster rect{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-3huDZNWpgW9xm3Oa .cluster-label,#mermaid-svg-3huDZNWpgW9xm3Oa .nodeLabel{color:#131300;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-cluster rect.outer{rx:5px;ry:5px;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-state .divider{stroke:#9370DB;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-state .title-state{rx:5px;ry:5px;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-cluster.statediagram-cluster .inner{fill:white;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-cluster.statediagram-cluster-alt .inner{fill:#f0f0f0;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-cluster .inner{rx:0;ry:0;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-state rect.basic{rx:5px;ry:5px;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-state rect.divider{stroke-dasharray:10,10;fill:#f0f0f0;}#mermaid-svg-3huDZNWpgW9xm3Oa .note-edge{stroke-dasharray:5;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-note rect{fill:#fff5ad;stroke:#aaaa33;stroke-width:1px;rx:0;ry:0;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-note rect{fill:#fff5ad;stroke:#aaaa33;stroke-width:1px;rx:0;ry:0;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-note text{fill:black;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram-note .nodeLabel{color:black;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagram .edgeLabel{color:red;}#mermaid-svg-3huDZNWpgW9xm3Oa #dependencyStart,#mermaid-svg-3huDZNWpgW9xm3Oa #dependencyEnd{fill:#333333;stroke:#333333;stroke-width:1;}#mermaid-svg-3huDZNWpgW9xm3Oa .statediagramTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-3huDZNWpgW9xm3Oa :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;}<\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7528\u6237\u5728\u6388\u6743\u9875\u5f3a\u8ba4\u8bc1\u5e76\u540c\u610f<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7528\u6237\u5728 App \u7f29\u5c0f\u8303\u56f4&#xff08;\u79fb\u9664\u8d26\u6237\u3001\u8c03\u4f4e\u989d\u5ea6&#xff09;<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7528\u6237\u6682\u505c \/ \u98ce\u63a7\u6682\u505c<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7528\u6237\u5728 App \u5185\u5f3a\u8ba4\u8bc1\u540e\u6062\u590d<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u7528\u6237\u64a4\u9500 \/ \u98ce\u63a7\u64a4\u9500 \/ \u5ba2\u6237\u7aef\u4e0b\u7ebf \/ \u8d26\u6237\u4e8b\u4ef6<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/p>\n<p>\u8fbe\u5230\u91cd\u65b0\u8ba4\u8bc1\u671f\u9650<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Active<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Suspended<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Revoked<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Expired<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/span><\/p>\n<p>\u51e0\u4e2a\u8bbe\u8ba1\u8981\u70b9&#xff1a;<\/p>\n<ul>\n<li>\u589e\u91cf\u6388\u6743\u4e0d\u662f\u65b0 grant&#xff0c;\u800c\u662f\u540c\u4e00 grant \u7684\u6269\u5c55&#xff08;\u9700\u91cd\u65b0\u540c\u610f&#xff09;&#xff0c;\u8fd9\u6837\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3\u91cc\u4e00\u4e2a AI \u8fde\u63a5\u53ea\u5360\u4e00\u884c&#xff1b;<\/li>\n<li>\u7f29\u5c0f\u8303\u56f4\u4e0d\u9700\u8981\u91cd\u65b0\u8d70 OAuth&#xff1a;\u7528\u6237\u5728 App \u4e2d\u79fb\u9664\u8d26\u6237\u6216\u8c03\u4f4e\u989d\u5ea6&#xff0c;\u6388\u6743\u767b\u8bb0\u518c\u5373\u65f6\u66f4\u65b0&#xff0c;\u7ecf\u7531 Token Exchange&#xff08;\u7b2c 6 \u7bc7&#xff09;\u5728\u4e0b\u4e00\u6b21\u8c03\u7528\u65f6\u751f\u6548&#xff1b;<\/li>\n<li>\u6682\u505c\u4e0e\u64a4\u9500\u5206\u5f00&#xff1a;\u6682\u505c\u53ef\u6062\u590d&#xff0c;\u9002\u5408\u300c\u6211\u51fa\u56fd\u8fd9\u4e24\u5468\u5148\u505c\u6389\u300d&#xff1b;\u64a4\u9500\u4e0d\u53ef\u9006&#xff0c;\u9700\u8981\u91cd\u65b0\u6388\u6743&#xff1b;<\/li>\n<li>\u5230\u671f\u5373\u5931\u6548&#xff1a;\u91cd\u65b0\u8ba4\u8bc1\u671f\u9650&#xff08;\u7b2c 4 \u7bc7\u5efa\u8bae\u53ea\u8bfb \u2264 90 \u5929\u3001\u542b\u8d77\u8349\u6743\u9650 \u2264 30 \u5929&#xff09;\u5230\u4e86\u5c31\u8fdb\u5165 Expired&#xff0c;AI \u5ba2\u6237\u7aef\u5237\u65b0\u65f6\u5f97\u5230 invalid_grant&#xff0c;\u5f15\u5bfc\u7528\u6237\u91cd\u65b0\u8fde\u63a5\u3002<\/li>\n<\/ul>\n<hr \/>\n<h3>2. \u5404\u7c7b\u51ed\u8bc1\u4e0e\u53e5\u67c4\u7684\u751f\u547d\u5468\u671f<\/h3>\n<table>\n<tr>\u5bf9\u8c61\u5178\u578b\u6709\u6548\u671f\u5b58\u653e\u4f4d\u7f6e\u5931\u6548\u65b9\u5f0f<\/tr>\n<tbody>\n<tr>\n<td>\u6388\u6743&#xff08;grant&#xff09;<\/td>\n<td>30\u201390 \u5929<\/td>\n<td>\u94f6\u884c\u6388\u6743\u767b\u8bb0\u518c<\/td>\n<td>\u5230\u671f\u3001\u64a4\u9500<\/td>\n<\/tr>\n<tr>\n<td>refresh token<\/td>\n<td>\u6bcf\u6b21\u5237\u65b0\u8f6e\u6362&#xff1b;\u7edd\u5bf9\u6709\u6548\u671f\u4e0e grant \u4e00\u81f4<\/td>\n<td>AI \u5e73\u53f0<\/td>\n<td>\u8f6e\u6362\u3001\u91cd\u7528\u68c0\u6d4b\u3001grant \u64a4\u9500<\/td>\n<\/tr>\n<tr>\n<td>access token&#xff08;\u5916\u90e8&#xff09;<\/td>\n<td>5\u201315 \u5206\u949f&#xff08;\u7b2c 7 \u7bc7&#xff09;<\/td>\n<td>AI \u5e73\u53f0<\/td>\n<td>\u8fc7\u671f&#xff1b;MCP server \u5b9e\u65f6\u68c0\u67e5 grant \u72b6\u6001<\/td>\n<\/tr>\n<tr>\n<td>\u5185\u90e8 token<\/td>\n<td>\u2264 5 \u5206\u949f<\/td>\n<td>MCP server \u7f13\u5b58<\/td>\n<td>\u8fc7\u671f&#xff1b;grant \u64a4\u9500\u65f6\u6e05\u9664\u7f13\u5b58<\/td>\n<\/tr>\n<tr>\n<td>\u652f\u4ed8\u8349\u7a3f<\/td>\n<td>15 \u5206\u949f<\/td>\n<td>\u94f6\u884c<\/td>\n<td>\u7b7e\u6838\u3001\u62d2\u7edd\u3001\u64a4\u56de\u3001\u8fc7\u671f<\/td>\n<\/tr>\n<tr>\n<td>MRTR requestState<\/td>\n<td>15 \u5206\u949f<\/td>\n<td>\u7ecf\u5ba2\u6237\u7aef\u5f80\u8fd4<\/td>\n<td>HMAC \u8fc7\u671f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h4>2.1 refresh token \u8f6e\u6362\u4e0e\u91cd\u7528\u68c0\u6d4b<\/h4>\n<p>\u5bf9\u516c\u5171\u5ba2\u6237\u7aef&#xff0c;OAuth 2.1 \u548c MCP \u90fd\u8981\u6c42 refresh token \u8981\u4e48\u505a\u6301\u6709\u8005\u7ea6\u675f&#xff0c;\u8981\u4e48\u8f6e\u6362\u3002\u8f6e\u6362\u7684\u771f\u6b63\u4ef7\u503c\u5728\u4e8e\u91cd\u7528\u68c0\u6d4b&#xff1a;<\/p>\n<p>     \u6388\u6743\u670d\u52a1\u5668<\/p>\n<p>     \u653b\u51fb\u8005&#xff08;\u5077\u5230 RT1&#xff09;<\/p>\n<p>     AI \u5e73\u53f0&#xff08;\u5408\u6cd5\u5ba2\u6237\u7aef&#xff09;<\/p>\n<p>      \u6388\u6743\u670d\u52a1\u5668<\/p>\n<p>      \u653b\u51fb\u8005&#xff08;\u5077\u5230 RT1&#xff09;<\/p>\n<p>      AI \u5e73\u53f0&#xff08;\u5408\u6cd5\u5ba2\u6237\u7aef&#xff09;<\/p>\n<p>  #mermaid-svg-1M4Rjf8q7aMn8OgH{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-1M4Rjf8q7aMn8OgH .error-icon{fill:#552222;}#mermaid-svg-1M4Rjf8q7aMn8OgH .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-1M4Rjf8q7aMn8OgH .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-1M4Rjf8q7aMn8OgH .marker{fill:#333333;stroke:#333333;}#mermaid-svg-1M4Rjf8q7aMn8OgH .marker.cross{stroke:#333333;}#mermaid-svg-1M4Rjf8q7aMn8OgH svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-1M4Rjf8q7aMn8OgH p{margin:0;}#mermaid-svg-1M4Rjf8q7aMn8OgH .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-1M4Rjf8q7aMn8OgH text.actor&gt;tspan{fill:black;stroke:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .actor-line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-1M4Rjf8q7aMn8OgH .innerArc{stroke-width:1.5;stroke-dasharray:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-1M4Rjf8q7aMn8OgH .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-1M4Rjf8q7aMn8OgH #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-1M4Rjf8q7aMn8OgH .sequenceNumber{fill:white;}#mermaid-svg-1M4Rjf8q7aMn8OgH #sequencenumber{fill:#333;}#mermaid-svg-1M4Rjf8q7aMn8OgH #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-1M4Rjf8q7aMn8OgH .messageText{fill:#333;stroke:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-1M4Rjf8q7aMn8OgH .labelText,#mermaid-svg-1M4Rjf8q7aMn8OgH .labelText&gt;tspan{fill:black;stroke:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .loopText,#mermaid-svg-1M4Rjf8q7aMn8OgH .loopText&gt;tspan{fill:black;stroke:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-1M4Rjf8q7aMn8OgH .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-1M4Rjf8q7aMn8OgH .noteText,#mermaid-svg-1M4Rjf8q7aMn8OgH .noteText&gt;tspan{fill:black;stroke:none;}#mermaid-svg-1M4Rjf8q7aMn8OgH .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-1M4Rjf8q7aMn8OgH .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-1M4Rjf8q7aMn8OgH .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-1M4Rjf8q7aMn8OgH .actorPopupMenu{position:absolute;}#mermaid-svg-1M4Rjf8q7aMn8OgH .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 \/ 0.4));}#mermaid-svg-1M4Rjf8q7aMn8OgH .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-1M4Rjf8q7aMn8OgH .actor-man circle,#mermaid-svg-1M4Rjf8q7aMn8OgH line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-1M4Rjf8q7aMn8OgH :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;}<\/p>\n<p>   refresh_token&#061;RT1<\/p>\n<p>   1<\/p>\n<p>   AT2 &#043; RT2&#xff08;RT1 \u4f5c\u5e9f&#xff09;<\/p>\n<p>   2<\/p>\n<p>   refresh_token&#061;RT1<\/p>\n<p>   3<\/p>\n<p>   RT1 \u5df2\u88ab\u4f7f\u7528\u8fc7 \u2192 \u5224\u5b9a\u6cc4\u9732<\/p>\n<p>   4<\/p>\n<p>   \u64a4\u9500\u6574\u4e2a grant&#xff08;RT2 \u4e00\u5e76\u5931\u6548&#xff09;<\/p>\n<p>   5<\/p>\n<p>   400 invalid_grant<\/p>\n<p>   6<\/p>\n<p>   refresh_token&#061;RT2<\/p>\n<p>   7<\/p>\n<p>   400 invalid_grant \u2192 \u5ba2\u6237\u7aef\u5f15\u5bfc\u7528\u6237\u91cd\u65b0\u8fde\u63a5<\/p>\n<p>   8<\/p>\n<p>   \u89e6\u53d1\u98ce\u63a7\u4e8b\u4ef6&#xff0c;\u63a8\u9001 App \u901a\u77e5<\/p>\n<p>   9<\/p>\n<p>\u5b9e\u73b0\u7ec6\u8282&#xff1a;<\/p>\n<ul>\n<li>\u6309 grant \u7ef4\u62a4 refresh token \u5bb6\u65cf&#xff0c;\u4efb\u4f55\u4e00\u4e2a\u65e7 token \u88ab\u91cd\u7528&#xff0c;\u6574\u4e2a\u5bb6\u65cf\u4f5c\u5e9f&#xff1b;<\/li>\n<li>\u7ed9\u5e76\u53d1\u5237\u65b0\u7559\u4e00\u4e2a\u5f88\u77ed\u7684\u5bbd\u9650\u7a97\u53e3&#xff08;\u4f8b\u5982 2\u20135 \u79d2\u5185\u5141\u8bb8\u524d\u4e00\u4e2a RT \u518d\u7528\u4e00\u6b21\u5e76\u8fd4\u56de\u76f8\u540c\u7ed3\u679c&#xff09;&#xff0c;\u5426\u5219\u5ba2\u6237\u7aef\u7684\u5e76\u53d1\u5237\u65b0\u4f1a\u88ab\u8bef\u5224\u4e3a\u6cc4\u9732&#xff1b;<\/li>\n<li>\u5931\u6548\u65f6\u4e00\u5f8b\u8fd4\u56de invalid_grant\u3002Claude \u6587\u6863\u7279\u522b\u8981\u6c42\u8fd9\u4e00\u70b9&#xff1a;\u8fd4\u56de invalid_request \u6216\u81ea\u5b9a\u4e49\u9519\u8bef\u7801&#xff0c;\u53ef\u80fd\u8ba9\u5ba2\u6237\u7aef\u53cd\u590d\u91cd\u8bd5\u800c\u4e0d\u662f\u5f15\u5bfc\u7528\u6237\u91cd\u65b0\u6388\u6743&#xff1b;<\/li>\n<li>\u8f6e\u6362\u65f6&#xff0c;\u65b0 refresh token \u5fc5\u987b\u548c\u4f7f\u65e7 token \u4f5c\u5e9f\u7684\u662f\u540c\u4e00\u4e2a\u54cd\u5e94\u3002<\/li>\n<\/ul>\n<hr \/>\n<h3>3. \u64a4\u9500&#xff1a;\u56db\u79cd\u6765\u6e90&#xff0c;\u4e00\u6761\u4f20\u64ad\u94fe<\/h3>\n<h4>3.1 \u64a4\u9500\u4ece\u54ea\u91cc\u6765<\/h4>\n<table>\n<tr>\u6765\u6e90\u4f8b\u5b50\u8303\u56f4<\/tr>\n<tbody>\n<tr>\n<td>\u7528\u6237<\/td>\n<td>\u5728 App \u6388\u6743\u7ba1\u7406\u4e2d\u5fc3\u70b9\u300c\u64a4\u9500\u300d<\/td>\n<td>\u5355\u4e2a grant<\/td>\n<\/tr>\n<tr>\n<td>\u94f6\u884c\u98ce\u63a7<\/td>\n<td>refresh token \u91cd\u7528\u3001\u5f02\u5e38\u8c03\u7528\u6a21\u5f0f<\/td>\n<td>\u5355\u4e2a grant&#xff0c;\u6216\u8be5\u7528\u6237\u7684\u5168\u90e8 AI grant<\/td>\n<\/tr>\n<tr>\n<td>\u8d26\u6237\u4e8b\u4ef6<\/td>\n<td>\u8bbe\u5907\u91cd\u65b0\u7ed1\u5b9a\u3001\u5bc6\u7801\u91cd\u7f6e\u3001\u5361\u6302\u5931\u3001\u88ab\u6807\u8bb0\u4e3a\u7591\u4f3c\u53d7\u9a97\u3001\u9500\u6237<\/td>\n<td>\u8be5\u7528\u6237\u7684\u5168\u90e8 AI grant<\/td>\n<\/tr>\n<tr>\n<td>\u5ba2\u6237\u7aef\u7ea7<\/td>\n<td>AI \u5e73\u53f0\u53d1\u751f\u5b89\u5168\u4e8b\u4ef6<\/td>\n<td>\u8be5 client_id \u7684\u5168\u90e8 grant&#xff08;\u4e00\u952e\u4e0b\u7ebf&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u8d26\u6237\u4e8b\u4ef6\u8054\u52a8\u662f\u6700\u5bb9\u6613\u6f0f\u6389\u7684\u4e00\u9879\u3002\u7528\u6237\u521a\u521a\u56e0\u4e3a\u624b\u673a\u88ab\u76d7\u91cd\u65b0\u7ed1\u5b9a\u4e86\u8bbe\u5907&#xff0c;\u653b\u51fb\u8005\u5374\u4ecd\u53ef\u4ee5\u901a\u8fc7\u4e4b\u524d\u5efa\u7acb\u7684 AI \u6388\u6743\u8bfb\u53d6\u8d26\u6237\u2014\u2014\u8fd9\u663e\u7136\u4e0d\u5408\u7406\u3002\u5efa\u8bae&#xff1a;\u8bbe\u5907\u91cd\u65b0\u7ed1\u5b9a\u3001\u7591\u4f3c\u6b3a\u8bc8\u6807\u8bb0\u8fd9\u4e24\u7c7b\u4e8b\u4ef6&#xff0c;\u81ea\u52a8\u64a4\u9500\u8be5\u7528\u6237\u7684\u5168\u90e8 AI \u6388\u6743\u3002<\/p>\n<h4>3.2 AI \u5e73\u53f0\u4fa7\u7684\u300c\u65ad\u5f00\u8fde\u63a5\u300d<\/h4>\n<p>\u7528\u6237\u5728 Claude \u91cc\u5220\u9664 connector&#xff0c;Claude \u662f\u5426\u4f1a\u8c03\u7528\u94f6\u884c\u7684 RFC 7009 \u64a4\u9500\u7aef\u70b9&#xff1f;\u64b0\u5199\u65f6 Claude \u7684 connector \u6587\u6863\u6ca1\u6709\u8bf4\u660e\u3002\u94f6\u884c\u4e0d\u80fd\u4f9d\u8d56 AI \u5e73\u53f0\u901a\u77e5\u64a4\u9500&#xff1a;<\/p>\n<ul>\n<li>\u6388\u6743\u767b\u8bb0\u518c\u4e2d\u7684 grant \u4ecd\u7136\u6709\u6548&#xff0c;\u76f4\u5230\u7528\u6237\u5728 App \u4e2d\u64a4\u9500\u6216\u5230\u671f&#xff1b;<\/li>\n<li>\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3\u8981\u663e\u793a\u300c\u6700\u540e\u4f7f\u7528\u65f6\u95f4\u300d&#xff0c;\u957f\u65f6\u95f4\u672a\u4f7f\u7528\u7684\u6388\u6743\u5728 App \u4e2d\u63d0\u9192\u7528\u6237\u6e05\u7406&#xff1b;<\/li>\n<li>\u957f\u671f\u672a\u4f7f\u7528\u7684 grant \u53ef\u4ee5\u7531\u94f6\u884c\u81ea\u52a8\u6682\u505c\u3002<\/li>\n<\/ul>\n<h4>3.3 \u4f20\u64ad&#xff1a;\u4ece\u64a4\u9500\u5230\u4e0b\u4e00\u6b21\u8c03\u7528\u88ab\u62d2<\/h4>\n<p>     AI \u5ba2\u6237\u7aef<\/p>\n<p>     \u5185\u90e8 STS<\/p>\n<p>     MCP server<\/p>\n<p>     \u4e8b\u4ef6\u603b\u7ebf&#xff08;SSF \/ CAEP&#xff09;<\/p>\n<p>     \u6388\u6743\u670d\u52a1\u5668 \/ \u6388\u6743\u767b\u8bb0\u518c<\/p>\n<p>     \u624b\u673a\u94f6\u884c App<\/p>\n<p>      AI \u5ba2\u6237\u7aef<\/p>\n<p>      \u5185\u90e8 STS<\/p>\n<p>      MCP server<\/p>\n<p>      \u4e8b\u4ef6\u603b\u7ebf&#xff08;SSF \/ CAEP&#xff09;<\/p>\n<p>      \u6388\u6743\u670d\u52a1\u5668 \/ \u6388\u6743\u767b\u8bb0\u518c<\/p>\n<p>      \u624b\u673a\u94f6\u884c App<\/p>\n<p>  #mermaid-svg-kK4LfeqNahx5x1J1{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-kK4LfeqNahx5x1J1 .error-icon{fill:#552222;}#mermaid-svg-kK4LfeqNahx5x1J1 .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-kK4LfeqNahx5x1J1 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-kK4LfeqNahx5x1J1 .marker{fill:#333333;stroke:#333333;}#mermaid-svg-kK4LfeqNahx5x1J1 .marker.cross{stroke:#333333;}#mermaid-svg-kK4LfeqNahx5x1J1 svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-kK4LfeqNahx5x1J1 p{margin:0;}#mermaid-svg-kK4LfeqNahx5x1J1 .actor{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-kK4LfeqNahx5x1J1 text.actor&gt;tspan{fill:black;stroke:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .actor-line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-kK4LfeqNahx5x1J1 .innerArc{stroke-width:1.5;stroke-dasharray:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .messageLine0{stroke-width:1.5;stroke-dasharray:none;stroke:#333;}#mermaid-svg-kK4LfeqNahx5x1J1 .messageLine1{stroke-width:1.5;stroke-dasharray:2,2;stroke:#333;}#mermaid-svg-kK4LfeqNahx5x1J1 #arrowhead path{fill:#333;stroke:#333;}#mermaid-svg-kK4LfeqNahx5x1J1 .sequenceNumber{fill:white;}#mermaid-svg-kK4LfeqNahx5x1J1 #sequencenumber{fill:#333;}#mermaid-svg-kK4LfeqNahx5x1J1 #crosshead path{fill:#333;stroke:#333;}#mermaid-svg-kK4LfeqNahx5x1J1 .messageText{fill:#333;stroke:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .labelBox{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-kK4LfeqNahx5x1J1 .labelText,#mermaid-svg-kK4LfeqNahx5x1J1 .labelText&gt;tspan{fill:black;stroke:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .loopText,#mermaid-svg-kK4LfeqNahx5x1J1 .loopText&gt;tspan{fill:black;stroke:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .loopLine{stroke-width:2px;stroke-dasharray:2,2;stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);}#mermaid-svg-kK4LfeqNahx5x1J1 .note{stroke:#aaaa33;fill:#fff5ad;}#mermaid-svg-kK4LfeqNahx5x1J1 .noteText,#mermaid-svg-kK4LfeqNahx5x1J1 .noteText&gt;tspan{fill:black;stroke:none;}#mermaid-svg-kK4LfeqNahx5x1J1 .activation0{fill:#f4f4f4;stroke:#666;}#mermaid-svg-kK4LfeqNahx5x1J1 .activation1{fill:#f4f4f4;stroke:#666;}#mermaid-svg-kK4LfeqNahx5x1J1 .activation2{fill:#f4f4f4;stroke:#666;}#mermaid-svg-kK4LfeqNahx5x1J1 .actorPopupMenu{position:absolute;}#mermaid-svg-kK4LfeqNahx5x1J1 .actorPopupMenuPanel{position:absolute;fill:#ECECFF;box-shadow:0px 8px 16px 0px rgba(0,0,0,0.2);filter:drop-shadow(3px 5px 2px rgb(0 0 0 \/ 0.4));}#mermaid-svg-kK4LfeqNahx5x1J1 .actor-man line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;}#mermaid-svg-kK4LfeqNahx5x1J1 .actor-man circle,#mermaid-svg-kK4LfeqNahx5x1J1 line{stroke:hsl(259.6261682243, 59.7765363128%, 87.9019607843%);fill:#ECECFF;stroke-width:2px;}#mermaid-svg-kK4LfeqNahx5x1J1 :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;}<\/p>\n<p>     \u7528\u6237<\/p>\n<p>   \u64a4\u9500\u300cClaude\u300d\u7684\u6388\u6743<\/p>\n<p>   1<\/p>\n<p>   \u5f3a\u8ba4\u8bc1\u540e\u63d0\u4ea4\u64a4\u9500<\/p>\n<p>   2<\/p>\n<p>   grant \u72b6\u6001 \u2192 Revoked&#xff1b;\u4f5c\u5e9f refresh token \u5bb6\u65cf<\/p>\n<p>   3<\/p>\n<p>   \u53d1\u5e03\u4e8b\u4ef6&#xff08;session-revoked&#xff0c;subject &#061; grant_id&#xff09;<\/p>\n<p>   4<\/p>\n<p>   \u63a8\u9001<\/p>\n<p>   5<\/p>\n<p>   \u672c\u5730\u64a4\u9500\u8868\u52a0\u5165 grant_id&#xff1b;\u6e05\u9664\u5185\u90e8 token \u7f13\u5b58<\/p>\n<p>   6<\/p>\n<p>   \u63a8\u9001<\/p>\n<p>   7<\/p>\n<p>   \u62d2\u7edd\u8be5 grant \u7684\u540e\u7eed\u4ea4\u6362<\/p>\n<p>   8<\/p>\n<p>   tools\/call&#xff08;\u643a\u5e26\u4ecd\u672a\u8fc7\u671f\u7684 access token&#xff09;<\/p>\n<p>   9<\/p>\n<p>   401 invalid_token &#034;authorization revoked&#034;<\/p>\n<p>   10<\/p>\n<p>   refresh<\/p>\n<p>   11<\/p>\n<p>   400 invalid_grant<\/p>\n<p>   12<\/p>\n<p>   \u300c\u5df2\u64a4\u9500\u3002Claude \u5c06\u65e0\u6cd5\u518d\u8bbf\u95ee\u4f60\u7684\u8d26\u6237\u3002\u300d<\/p>\n<p>   13<\/p>\n<p>     \u7528\u6237<\/p>\n<p>\u5173\u952e\u5728\u7b2c 7\u201311 \u6b65&#xff1a;access token \u8fd8\u6ca1\u8fc7\u671f&#xff0c;\u4f46\u4e0b\u4e00\u6b21\u8c03\u7528\u5df2\u7ecf\u88ab\u62d2\u7edd\u3002 \u8fd9\u4f9d\u8d56 MCP server \u5728\u6bcf\u4e2a\u8bf7\u6c42\u4e2d\u68c0\u67e5 grant \u72b6\u6001&#xff0c;\u800c\u4e0d\u662f\u53ea\u6821\u9a8c JWT \u7b7e\u540d\u548c exp\u3002\u793a\u4f8b bankAuth \u4e2d\u95f4\u4ef6&#xff1a;<\/p>\n<p><span class=\"token keyword\">if<\/span> <span class=\"token punctuation\">(<\/span><span class=\"token operator\">!<\/span><span class=\"token function\">isClientEnabled<\/span><span class=\"token punctuation\">(<\/span>auth<span class=\"token punctuation\">.<\/span>clientId<span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">)<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token function\">audit<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span> action<span class=\"token operator\">:<\/span> <span class=\"token string\">&#039;authn&#039;<\/span><span class=\"token punctuation\">,<\/span> outcome<span class=\"token operator\">:<\/span> <span class=\"token string\">&#039;denied&#039;<\/span><span class=\"token punctuation\">,<\/span> reason<span class=\"token operator\">:<\/span> <span class=\"token string\">&#039;client_disabled&#039;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">,<\/span> auth<span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">;<\/span><br \/>\n  <span class=\"token keyword\">return<\/span> <span class=\"token function\">challenge<\/span><span class=\"token punctuation\">(<\/span>res<span class=\"token punctuation\">,<\/span> <span class=\"token number\">401<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#039;invalid_token&#039;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#039;client disabled by bank&#039;<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">;<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><br \/>\n<span class=\"token keyword\">if<\/span> <span class=\"token punctuation\">(<\/span><span class=\"token operator\">!<\/span><span class=\"token function\">isGrantActive<\/span><span class=\"token punctuation\">(<\/span>extra<span class=\"token punctuation\">.<\/span>grantId<span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">)<\/span> <span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token function\">audit<\/span><span class=\"token punctuation\">(<\/span><span class=\"token punctuation\">{<\/span> action<span class=\"token operator\">:<\/span> <span class=\"token string\">&#039;authn&#039;<\/span><span class=\"token punctuation\">,<\/span> outcome<span class=\"token operator\">:<\/span> <span class=\"token string\">&#039;denied&#039;<\/span><span class=\"token punctuation\">,<\/span> reason<span class=\"token operator\">:<\/span> <span class=\"token string\">&#039;grant_revoked&#039;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">,<\/span> auth<span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">;<\/span><br \/>\n  <span class=\"token keyword\">return<\/span> <span class=\"token function\">challenge<\/span><span class=\"token punctuation\">(<\/span>res<span class=\"token punctuation\">,<\/span> <span class=\"token number\">401<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#039;invalid_token&#039;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#039;authorization revoked&#039;<\/span><span class=\"token punctuation\">)<\/span><span class=\"token punctuation\">;<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<h4>3.4 JWT \u81ea\u6821\u9a8c\u8fd8\u662f\u5185\u7701&#xff1f;<\/h4>\n<table>\n<tr>\u65b9\u6848\u4f18\u70b9\u7f3a\u70b9<\/tr>\n<tbody>\n<tr>\n<td>JWT \u81ea\u6821\u9a8c&#xff08;RFC 9068&#xff09;<\/td>\n<td>\u65e0\u9700\u8c03\u7528 AS&#xff0c;\u5ef6\u8fdf\u4f4e<\/td>\n<td>\u64a4\u9500\u53ea\u80fd\u9760\u77ed\u6709\u6548\u671f\u6216\u989d\u5916\u7684\u64a4\u9500\u8868<\/td>\n<\/tr>\n<tr>\n<td>\u5185\u7701&#xff08;RFC 7662&#xff09;<\/td>\n<td>\u6bcf\u6b21\u90fd\u62ff\u5230\u5b9e\u65f6\u72b6\u6001<\/td>\n<td>\u6bcf\u6b21\u8c03\u7528\u90fd\u4f9d\u8d56 AS&#xff0c;AS \u6210\u4e3a\u5173\u952e\u8def\u5f84<\/td>\n<\/tr>\n<tr>\n<td>JWT &#043; \u4e8b\u4ef6\u9a71\u52a8\u7684\u64a4\u9500\u8868&#xff08;\u63a8\u8350&#xff09;<\/td>\n<td>\u4f4e\u5ef6\u8fdf&#xff0c;\u64a4\u9500\u79d2\u7ea7\u751f\u6548<\/td>\n<td>\u9700\u8981\u4e8b\u4ef6\u57fa\u7840\u8bbe\u65bd&#xff1b;\u4e8b\u4ef6\u4e22\u5931\u65f6\u4f9d\u8d56\u515c\u5e95<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u63a8\u8350\u65b9\u6848\u7684\u515c\u5e95&#xff1a;MCP server \u672c\u5730\u64a4\u9500\u8868\u540c\u65f6\u6309 TTL&#xff08;\u4f8b\u5982 60 \u79d2&#xff09;\u5b9a\u671f\u4ece\u6388\u6743\u767b\u8bb0\u518c\u62c9\u53d6\u589e\u91cf&#xff0c;\u4e8b\u4ef6\u4e22\u5931\u65f6\u6700\u591a\u5ef6\u8fdf\u4e00\u4e2a TTL\u3002<\/p>\n<p>\u4e8b\u4ef6\u6807\u51c6&#xff1a;OpenID Foundation \u7684 Shared Signals Framework 1.0 \u4e0e CAEP 1.0 \u5df2\u4e8e 2025 \u5e74\u6210\u4e3a Final \u89c4\u8303\u3002SSF \u5b9a\u4e49\u5b89\u5168\u4e8b\u4ef6\u4ee4\u724c&#xff08;SET&#xff09;\u7684\u4f20\u8f93\u65b9\u5f0f&#xff0c;CAEP \u5b9a\u4e49\u4f1a\u8bdd\u64a4\u9500\u3001\u51ed\u8bc1\u53d8\u66f4\u7b49\u4e8b\u4ef6\u7c7b\u578b\u3002\u94f6\u884c\u5185\u90e8\u4f7f\u7528 SSF\/CAEP \u7684\u597d\u5904\u662f&#xff1a;\u540c\u4e00\u5957\u4e8b\u4ef6\u65e2\u80fd\u9a71\u52a8 MCP server&#xff0c;\u4e5f\u80fd\u9a71\u52a8\u5176\u4ed6\u4f9d\u8d56\u540c\u4e00\u8eab\u4efd\u4f53\u7cfb\u7684\u7cfb\u7edf\u3002<\/p>\n<hr \/>\n<h3>4. \u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3<\/h3>\n<p>\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3\u662f\u8fd9\u5957\u8bbe\u8ba1\u91cc\u7528\u6237\u552f\u4e00\u80fd\u770b\u89c1\u3001\u80fd\u63a7\u5236 AI \u6388\u6743\u7684\u5730\u65b9&#xff0c;\u5fc5\u987b\u653e\u5728\u94f6\u884c\u81ea\u5df1\u7684 App \u548c\u7f51\u94f6\u91cc&#xff0c;\u800c\u4e0d\u662f AI \u5e73\u53f0\u4e0a\u3002<\/p>\n<h4>4.1 \u4fe1\u606f\u67b6\u6784<\/h4>\n<p>  #mermaid-svg-AFCl5o6ZuJ17W15j{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-svg-AFCl5o6ZuJ17W15j .error-icon{fill:#552222;}#mermaid-svg-AFCl5o6ZuJ17W15j .error-text{fill:#552222;stroke:#552222;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-thickness-normal{stroke-width:1px;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-thickness-thick{stroke-width:3.5px;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-pattern-solid{stroke-dasharray:0;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-svg-AFCl5o6ZuJ17W15j .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-svg-AFCl5o6ZuJ17W15j .marker{fill:#333333;stroke:#333333;}#mermaid-svg-AFCl5o6ZuJ17W15j .marker.cross{stroke:#333333;}#mermaid-svg-AFCl5o6ZuJ17W15j svg{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:16px;}#mermaid-svg-AFCl5o6ZuJ17W15j p{margin:0;}#mermaid-svg-AFCl5o6ZuJ17W15j .label{font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;color:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j .cluster-label text{fill:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j .cluster-label span{color:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j .cluster-label span p{background-color:transparent;}#mermaid-svg-AFCl5o6ZuJ17W15j .label text,#mermaid-svg-AFCl5o6ZuJ17W15j span{fill:#333;color:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j .node rect,#mermaid-svg-AFCl5o6ZuJ17W15j .node circle,#mermaid-svg-AFCl5o6ZuJ17W15j .node ellipse,#mermaid-svg-AFCl5o6ZuJ17W15j .node polygon,#mermaid-svg-AFCl5o6ZuJ17W15j .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-svg-AFCl5o6ZuJ17W15j .rough-node .label text,#mermaid-svg-AFCl5o6ZuJ17W15j .node .label text,#mermaid-svg-AFCl5o6ZuJ17W15j .image-shape .label,#mermaid-svg-AFCl5o6ZuJ17W15j .icon-shape .label{text-anchor:middle;}#mermaid-svg-AFCl5o6ZuJ17W15j .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-svg-AFCl5o6ZuJ17W15j .rough-node .label,#mermaid-svg-AFCl5o6ZuJ17W15j .node .label,#mermaid-svg-AFCl5o6ZuJ17W15j .image-shape .label,#mermaid-svg-AFCl5o6ZuJ17W15j .icon-shape .label{text-align:center;}#mermaid-svg-AFCl5o6ZuJ17W15j .node.clickable{cursor:pointer;}#mermaid-svg-AFCl5o6ZuJ17W15j .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-svg-AFCl5o6ZuJ17W15j .arrowheadPath{fill:#333333;}#mermaid-svg-AFCl5o6ZuJ17W15j .edgePath .path{stroke:#333333;stroke-width:2.0px;}#mermaid-svg-AFCl5o6ZuJ17W15j .flowchart-link{stroke:#333333;fill:none;}#mermaid-svg-AFCl5o6ZuJ17W15j .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-AFCl5o6ZuJ17W15j .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-svg-AFCl5o6ZuJ17W15j .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-AFCl5o6ZuJ17W15j .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-svg-AFCl5o6ZuJ17W15j .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-svg-AFCl5o6ZuJ17W15j .cluster text{fill:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j .cluster span{color:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-svg-AFCl5o6ZuJ17W15j .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-svg-AFCl5o6ZuJ17W15j rect.text{fill:none;stroke-width:0;}#mermaid-svg-AFCl5o6ZuJ17W15j .icon-shape,#mermaid-svg-AFCl5o6ZuJ17W15j .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-svg-AFCl5o6ZuJ17W15j .icon-shape p,#mermaid-svg-AFCl5o6ZuJ17W15j .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-svg-AFCl5o6ZuJ17W15j .icon-shape .label rect,#mermaid-svg-AFCl5o6ZuJ17W15j .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-svg-AFCl5o6ZuJ17W15j .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-svg-AFCl5o6ZuJ17W15j .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-svg-AFCl5o6ZuJ17W15j :root{&#8211;mermaid-font-family:\\&#8221;trebuchet ms\\&#8221;,verdana,arial,sans-serif;}<\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"edgeLabel\"><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>AI \u6388\u6743\u7ba1\u7406<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u5df2\u8fde\u63a5\u7684 AI \u670d\u52a1<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u603b\u5f00\u5173&#xff1a;\u6682\u505c\u6240\u6709 AI \u8fde\u63a5<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6388\u6743\u53d8\u66f4\u8bb0\u5f55<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>Claude&#xff08;claude.ai&#xff09;\u00b7 \u5df2\u9a8c\u8bc1<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8fde\u63a5\u65f6\u95f4 \u00b7 \u8ba4\u8bc1\u65b9\u5f0f \u00b7 \u5230\u671f\u65e5<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u53ef\u4ee5\u505a&#xff1a;\u67e5\u770b 2 \u4e2a\u8d26\u6237\u7684\u4f59\u989d\u4e0e\u4ea4\u6613\u8d77\u8349\u8f6c\u8d26&#xff08;\u9700\u4f60\u5728 App \u7b7e\u6838&#xff09;<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8d77\u8349\u989d\u5ea6&#xff1a;\u5df2\u7528 HK$4,000 \/ \u5408\u5171 HK$8,000\u6bcf\u7b14\u4e0a\u9650 HK$5,000 \u00b7 \u81f3 11 \u6708 22 \u65e5<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6700\u8fd1\u6d3b\u52a8&#xff1a;\u4eca\u5929 14:02 \u67e5\u8be2\u4ea4\u6613 \u00b7 13:58 \u8d77\u8349\u8f6c\u8d26&#xff08;\u5df2\u7b7e\u6838&#xff09;<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u64cd\u4f5c<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u79fb\u9664\u8d26\u6237<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u8c03\u4f4e\u989d\u5ea6<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u6682\u505c<\/p>\n<p><\/span><\/p>\n<p>         <span class=\"nodeLabel\"><\/p>\n<p>\u64a4\u9500<\/p>\n<p><\/span><\/p>\n<h4>4.2 \u8bbe\u8ba1\u539f\u5219<\/h4>\n<li>\u5ba2\u6237\u7aef\u8eab\u4efd\u8981\u53ef\u4fe1\u3002\u663e\u793a\u7684\u540d\u79f0\u6765\u81ea\u94f6\u884c\u7684\u5ba2\u6237\u7aef\u767b\u8bb0&#xff08;\u9884\u6ce8\u518c&#xff09;\u6216 CIMD \u5141\u8bb8\u540d\u5355\u4e2d\u7684\u57df\u540d&#xff0c;\u800c\u4e0d\u662f\u5ba2\u6237\u7aef\u81ea\u62a5\u7684 client_name\u3002\u5141\u8bb8\u540d\u5355\u4e4b\u5916\u7684\u5ba2\u6237\u7aef\u6839\u672c\u4e0d\u4f1a\u51fa\u73b0\u5728\u8fd9\u91cc\u3002<\/li>\n<li>\u6743\u9650\u7528\u4eba\u8bdd\u63cf\u8ff0&#xff0c;\u4e0e\u540c\u610f\u9875&#xff08;\u7b2c 5 \u7bc7&#xff09;\u7528\u540c\u4e00\u5957\u6587\u6848\u751f\u6210\u5668&#xff0c;\u4fdd\u8bc1\u7528\u6237\u5728\u4e24\u5904\u770b\u5230\u7684\u4e00\u81f4\u3002<\/li>\n<li>\u989d\u5ea6\u663e\u793a\u6d88\u8017\u3002RAR \u53ea\u8868\u8fbe\u4e0a\u9650&#xff0c;\u300c\u5df2\u7528\u591a\u5c11\u300d\u6765\u81ea\u670d\u52a1\u7aef\u53f0\u8d26\u3002<\/li>\n<li>\u6700\u8fd1\u6d3b\u52a8\u6765\u81ea\u5ba1\u8ba1\u65e5\u5fd7&#xff08;\u7b2c 11 \u7bc7&#xff09;&#xff0c;\u81f3\u5c11\u663e\u793a\u5de5\u5177\u7c7b\u522b\u3001\u65f6\u95f4\u548c\u7ed3\u679c\u3002<\/li>\n<li>\u7f29\u5c0f\u8303\u56f4\u5373\u65f6\u751f\u6548&#xff0c;\u6269\u5927\u8303\u56f4\u5fc5\u987b\u56de\u5230 OAuth \u6388\u6743\u6d41\u7a0b\u3002 \u7528\u6237\u5728 App \u91cc\u53ef\u4ee5\u79fb\u9664\u8d26\u6237\u3001\u8c03\u4f4e\u989d\u5ea6&#xff0c;\u4f46\u4e0d\u80fd\u5728 App \u91cc\u76f4\u63a5\u8c03\u9ad8 AI \u7684\u989d\u5ea6\u2014\u2014\u8c03\u9ad8\u8981\u4ece AI \u4fa7\u89e6\u53d1\u589e\u91cf\u6388\u6743\u5e76\u91cd\u65b0\u540c\u610f\u3002\u8fd9\u662f\u7b2c 2 \u7bc7\u300c\u5b89\u5168\u65b9\u5411\u4e0d\u5bf9\u79f0\u300d\u539f\u5219\u5728\u6388\u6743\u7ba1\u7406\u4e0a\u7684\u4f53\u73b0\u3002<\/li>\n<li>\u603b\u5f00\u5173\u3002\u4e00\u952e\u6682\u505c\u6240\u6709 AI \u8fde\u63a5&#xff0c;\u6062\u590d\u65f6\u9700\u8981\u5f3a\u8ba4\u8bc1\u3002\u8fd9\u4e0e HKMA\u300cBye to unused functions\u300d\u7684\u7cbe\u795e\u4e00\u81f4&#xff1a;\u8ba9\u5ba2\u6237\u80fd\u4e3b\u52a8\u5173\u6389\u4e0d\u7528\u7684\u9ad8\u98ce\u9669\u529f\u80fd\u3002<\/li>\n<h4>4.3 \u901a\u77e5<\/h4>\n<table>\n<tr>\u4e8b\u4ef6\u901a\u77e5\u65b9\u5f0f<\/tr>\n<tbody>\n<tr>\n<td>\u65b0\u5efa AI \u6388\u6743<\/td>\n<td>App \u63a8\u9001&#xff08;\u7acb\u5373&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u6388\u6743\u8303\u56f4\u6269\u5927<\/td>\n<td>App \u63a8\u9001&#xff08;\u7acb\u5373&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>AI \u8d77\u8349\u4e86\u4e00\u7b14\u4ed8\u6b3e<\/td>\n<td>App \u63a8\u9001&#xff08;\u5373\u7b7e\u6838\u8bf7\u6c42\u672c\u8eab&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u98ce\u63a7\u6682\u505c\u6216\u64a4\u9500<\/td>\n<td>App \u63a8\u9001 &#043; \u77ed\u4fe1<\/td>\n<\/tr>\n<tr>\n<td>\u6388\u6743\u5373\u5c06\u5230\u671f<\/td>\n<td>App \u5185\u63d0\u9192&#xff08;\u63d0\u524d 7 \u5929&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u957f\u671f\u672a\u4f7f\u7528<\/td>\n<td>App \u5185\u63d0\u9192&#xff08;\u4f8b\u5982 30 \u5929\u672a\u7528&#xff09;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h3>5. \u6388\u6743\u767b\u8bb0\u518c\u7684\u6570\u636e\u6a21\u578b<\/h3>\n<p><span class=\"token punctuation\">{<\/span><br \/>\n  <span class=\"token string-property property\">&#034;grant_id&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;grt_8Kd2\u2026&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;status&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;active&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;cif&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;CIF0012345678&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;sub_pairwise&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;pw_4f9c1e\u2026&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;client_id&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;examplebank-claude-hosted&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;client_display&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">{<\/span> <span class=\"token string-property property\">&#034;name&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;Claude&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;domain&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;claude.ai&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;verified&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token boolean\">true<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;created_at&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;2026-10-23T05:58:00Z&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;auth_context&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">{<\/span> <span class=\"token string-property property\">&#034;acr&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;urn:examplebank:acr:bound-device&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;amr&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;hwk&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;face&#034;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;device_id&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;dev_\u2026&#034;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;scopes&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;accounts:read&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;transactions:read&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;payments:draft&#034;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;accounts&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;acc_7Hq2&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string\">&#034;acc_9Lm4&#034;<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;authorization_details&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token punctuation\">{<\/span> <span class=\"token string-property property\">&#034;type&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;https:\/\/examplebank.hk\/rar\/payment-draft\/v1&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;\u2026&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;\u2026&#034;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">]<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;reauth_due_at&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;2026-11-22T05:58:00Z&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;last_used_at&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;2026-10-23T06:02:11Z&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;refresh_family_id&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;rtf_\u2026&#034;<\/span><span class=\"token punctuation\">,<\/span><br \/>\n  <span class=\"token string-property property\">&#034;history&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">[<\/span><br \/>\n    <span class=\"token punctuation\">{<\/span> <span class=\"token string-property property\">&#034;at&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;2026-10-23T05:58:00Z&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;event&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;created&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;by&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;user&#034;<\/span> <span class=\"token punctuation\">}<\/span><span class=\"token punctuation\">,<\/span><br \/>\n    <span class=\"token punctuation\">{<\/span> <span class=\"token string-property property\">&#034;at&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;2026-10-23T06:00:30Z&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;event&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;scope_expanded&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;by&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token string\">&#034;user&#034;<\/span><span class=\"token punctuation\">,<\/span> <span class=\"token string-property property\">&#034;added&#034;<\/span><span class=\"token operator\">:<\/span> <span class=\"token punctuation\">[<\/span><span class=\"token string\">&#034;payments:draft&#034;<\/span><span class=\"token punctuation\">]<\/span> <span class=\"token punctuation\">}<\/span><br \/>\n  <span class=\"token punctuation\">]<\/span><br \/>\n<span class=\"token punctuation\">}<\/span><\/p>\n<hr \/>\n<h3>6. \u5230\u671f\u4e0e\u7eed\u671f\u4f53\u9a8c<\/h3>\n<p>\u91cd\u65b0\u8ba4\u8bc1\u671f\u9650\u5230\u4e86&#xff0c;\u6388\u6743\u8fdb\u5165 Expired\u3002\u7528\u6237\u5728 AI \u91cc\u4e0b\u4e00\u6b21\u63d0\u95ee\u65f6&#xff0c;\u4f53\u9a8c\u4f1a\u662f\u8fd9\u6837&#xff1a;<\/p>\n<li>AI \u5ba2\u6237\u7aef\u5237\u65b0 token&#xff0c;\u5f97\u5230 invalid_grant&#xff1b;<\/li>\n<li>\u5ba2\u6237\u7aef\u63d0\u793a\u7528\u6237\u91cd\u65b0\u8fde\u63a5&#xff0c;\u6253\u5f00\u94f6\u884c\u6388\u6743\u9875&#xff1b;<\/li>\n<li>\u7528\u6237\u7528\u5df2\u7ed1\u5b9a\u8bbe\u5907\u786e\u8ba4\u8eab\u4efd&#xff1b;<\/li>\n<li>\u540c\u610f\u9875\u9ed8\u8ba4\u5e26\u51fa\u4e0a\u4e00\u6b21\u6388\u6743\u7684\u8303\u56f4&#xff08;\u8d26\u6237\u3001\u989d\u5ea6&#xff09;&#xff0c;\u7528\u6237\u786e\u8ba4\u6216\u8c03\u6574&#xff1b;<\/li>\n<li>\u65b0 grant \u5efa\u7acb&#xff0c;\u65e7 grant \u7684\u5386\u53f2\u8bb0\u5f55\u4fdd\u7559\u5e76\u5173\u8054\u3002<\/li>\n<p>\u51e0\u4e2a\u7ec6\u8282&#xff1a;<\/p>\n<ul>\n<li>\u63d0\u524d\u63d0\u9192&#xff1a;\u5230\u671f\u524d 7 \u5929\u5728 App \u5185\u63d0\u9192&#xff0c;\u7528\u6237\u53ef\u4ee5\u5728 App \u5185\u76f4\u63a5\u7eed\u671f&#xff08;\u5f3a\u8ba4\u8bc1\u540e\u5ef6\u957f\u671f\u9650&#xff09;&#xff0c;\u907f\u514d\u5728 AI \u5bf9\u8bdd\u4e2d\u9014\u88ab\u6253\u65ad&#xff1b;<\/li>\n<li>\u7eed\u671f\u4e0d\u6269\u5927\u8303\u56f4&#xff1a;\u7eed\u671f\u53ea\u5ef6\u957f\u65f6\u95f4&#xff0c;\u6269\u5927\u6743\u9650\u4ecd\u8d70\u589e\u91cf\u6388\u6743&#xff1b;<\/li>\n<li>\u8d77\u8349\u989d\u5ea6\u91cd\u65b0\u8ba1\u7b97&#xff1a;\u65b0 grant \u7684\u7d2f\u8ba1\u989d\u5ea6\u4ece\u96f6\u5f00\u59cb&#xff0c;\u65e7 grant \u4e0b\u672a\u7b7e\u6838\u7684\u8349\u7a3f\u968f\u65e7 grant \u5931\u6548\u3002<\/li>\n<\/ul>\n<hr \/>\n<h3>7. \u5931\u8d25\u6a21\u5f0f<\/h3>\n<table>\n<tr>\u5931\u8d25\u540e\u679c\u5bf9\u7b56<\/tr>\n<tbody>\n<tr>\n<td>\u64a4\u9500\u4e8b\u4ef6\u4e22\u5931<\/td>\n<td>\u64a4\u9500\u540e\u4ecd\u53ef\u8c03\u7528&#xff0c;\u76f4\u5230 access token \u8fc7\u671f<\/td>\n<td>\u672c\u5730\u64a4\u9500\u8868\u5b9a\u671f\u5168\u91cf\u6216\u589e\u91cf\u540c\u6b65&#xff08;\u2264 60 \u79d2&#xff09;&#xff1b;access token \u672c\u8eab\u77ed\u671f<\/td>\n<\/tr>\n<tr>\n<td>\u6388\u6743\u767b\u8bb0\u518c\u4e0d\u53ef\u7528<\/td>\n<td>MCP server \u65e0\u6cd5\u786e\u8ba4 grant \u72b6\u6001<\/td>\n<td>\u95ed\u5408&#xff1a;\u62d2\u7edd\u8bf7\u6c42&#xff0c;\u800c\u4e0d\u662f\u653e\u884c&#xff1b;\u5bf9\u53ea\u8bfb\u8bf7\u6c42\u53ef\u4ee5\u5bb9\u5fcd\u77ed\u65f6\u7f13\u5b58&#xff0c;\u5bf9\u8d77\u8349\u8bf7\u6c42\u4e00\u5f8b\u5b9e\u65f6\u786e\u8ba4<\/td>\n<\/tr>\n<tr>\n<td>\u5ba2\u6237\u7aef\u5e76\u53d1\u5237\u65b0<\/td>\n<td>\u88ab\u8bef\u5224\u4e3a refresh token \u91cd\u7528&#xff0c;grant \u88ab\u64a4\u9500<\/td>\n<td>\u77ed\u5bbd\u9650\u7a97\u53e3&#xff1b;\u540c\u4e00\u5bbd\u9650\u7a97\u53e3\u5185\u8fd4\u56de\u76f8\u540c\u7ed3\u679c<\/td>\n<\/tr>\n<tr>\n<td>\u65f6\u949f\u6f02\u79fb<\/td>\n<td>token \u8fc7\u65e9\u5931\u6548\u6216\u8fc7\u665a\u5931\u6548<\/td>\n<td>\u7edf\u4e00\u65f6\u95f4\u6e90&#xff1b;\u6821\u9a8c\u65f6\u7559 30 \u79d2\u5bb9\u5dee<\/td>\n<\/tr>\n<tr>\n<td>\u7528\u6237\u5728\u591a\u4e2a\u8bbe\u5907\u4e0a\u64cd\u4f5c\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3<\/td>\n<td>\u72b6\u6001\u51b2\u7a81<\/td>\n<td>\u4ee5\u6388\u6743\u767b\u8bb0\u518c\u4e3a\u552f\u4e00\u4e8b\u5b9e\u6765\u6e90&#xff0c;\u6bcf\u6b21\u64cd\u4f5c\u5e26\u7248\u672c\u53f7<\/td>\n<\/tr>\n<tr>\n<td>AI \u5e73\u53f0\u957f\u671f\u4e0d\u8c03\u7528<\/td>\n<td>\u6388\u6743\u4e00\u76f4\u6302\u7740&#xff0c;\u7528\u6237\u5df2\u5fd8\u8bb0<\/td>\n<td>\u957f\u671f\u672a\u7528\u63d0\u9192&#xff1b;\u8d85\u8fc7\u9608\u503c\u81ea\u52a8\u6682\u505c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h3>8. \u64a4\u9500\u65f6\u4e0e\u7528\u6237\u548c AI \u7684\u6c9f\u901a<\/h3>\n<p>\u64a4\u9500\u4e0d\u53ea\u662f\u6280\u672f\u52a8\u4f5c&#xff0c;\u8fd8\u8981\u8ba9\u5404\u65b9\u5f97\u5230\u6e05\u695a\u7684\u53cd\u9988&#xff1a;<\/p>\n<ul>\n<li>\u5bf9\u7528\u6237&#xff1a;App \u4e2d\u7acb\u5373\u663e\u793a\u300c\u5df2\u64a4\u9500&#xff0c;Claude \u5c06\u65e0\u6cd5\u518d\u8bbf\u95ee\u4f60\u7684\u8d26\u6237\u300d&#xff1b;\u82e5\u6709\u672a\u7b7e\u6838\u7684\u8349\u7a3f&#xff0c;\u4e00\u5e76\u5217\u51fa\u5e76\u6807\u4e3a\u4f5c\u5e9f&#xff1b;<\/li>\n<li>\u5bf9 AI \u5ba2\u6237\u7aef&#xff1a;MCP server \u8fd4\u56de 401 invalid_token&#xff0c;error_description \u5199\u660e\u300cauthorization revoked\u300d&#xff0c;\u5ba2\u6237\u7aef\u636e\u6b64\u63d0\u793a\u7528\u6237&#xff0c;\u800c\u4e0d\u662f\u53cd\u590d\u91cd\u8bd5&#xff1b;<\/li>\n<li>\u5bf9\u98ce\u63a7\u4e0e\u5ba2\u670d&#xff1a;\u64a4\u9500\u4e8b\u4ef6\u5e26\u4e0a\u6765\u6e90&#xff08;\u7528\u6237\u3001\u98ce\u63a7\u3001\u8d26\u6237\u4e8b\u4ef6\u3001\u5ba2\u6237\u7aef\u4e0b\u7ebf&#xff09;&#xff0c;\u5ba2\u670d\u5904\u7406\u6295\u8bc9\u65f6\u53ef\u4ee5\u76f4\u63a5\u67e5\u5230\u3002<\/li>\n<\/ul>\n<p>\u98ce\u63a7\u64a4\u9500\u7684\u60c5\u5f62\u8fd8\u8981\u8003\u8651\u901a\u77e5\u63aa\u8f9e&#xff1a;\u5982\u679c\u662f\u7591\u4f3c\u6b3a\u8bc8\u5bfc\u81f4\u7684\u64a4\u9500&#xff0c;\u901a\u77e5\u4e2d\u4e0d\u5e94\u66b4\u9732\u5177\u4f53\u7684\u98ce\u63a7\u89c4\u5219&#xff0c;\u4f46\u8981\u544a\u8bc9\u7528\u6237\u5982\u4f55\u8054\u7cfb\u94f6\u884c\u3002<\/p>\n<hr \/>\n<h3>9. \u8fd0\u8425\u6307\u6807<\/h3>\n<table>\n<tr>\u6307\u6807\u76ee\u6807<\/tr>\n<tbody>\n<tr>\n<td>\u64a4\u9500\u5230 MCP server \u62d2\u7edd\u7684\u5ef6\u8fdf&#xff08;P99&#xff09;<\/td>\n<td>\u2264 5 \u79d2&#xff08;\u4e8b\u4ef6\u8def\u5f84&#xff09;&#xff0c;\u2264 60 \u79d2&#xff08;\u515c\u5e95&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u5ba2\u6237\u7aef\u4e00\u952e\u4e0b\u7ebf\u6f14\u7ec3<\/td>\n<td>\u6bcf\u5b63\u5ea6\u4e00\u6b21&#xff0c;\u5168\u91cf\u751f\u6548 \u2264 1 \u5206\u949f<\/td>\n<\/tr>\n<tr>\n<td>refresh token \u91cd\u7528\u4e8b\u4ef6<\/td>\n<td>\u6bcf\u4e00\u8d77\u90fd\u8fdb\u5165\u4eba\u5de5\u590d\u6838<\/td>\n<\/tr>\n<tr>\n<td>\u957f\u671f\u672a\u7528\u6388\u6743\u5360\u6bd4<\/td>\n<td>\u6301\u7eed\u4e0b\u964d&#xff08;\u8bf4\u660e\u6e05\u7406\u63d0\u9192\u6709\u6548&#xff09;<\/td>\n<\/tr>\n<tr>\n<td>\u7528\u6237\u64a4\u9500\u7387\u3001\u64a4\u9500\u539f\u56e0<\/td>\n<td>\u4ea7\u54c1\u4e0e\u98ce\u63a7\u7684\u5171\u540c\u8f93\u5165<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr \/>\n<h3>\u7ed9\u94f6\u884c\u7684\u8bbe\u8ba1\u51b3\u7b56\u6e05\u5355<\/h3>\n<li>\u628a grant \u4f5c\u4e3a\u4e00\u7b49\u4e1a\u52a1\u5bf9\u8c61&#xff0c;\u5efa\u7acb\u6388\u6743\u767b\u8bb0\u518c&#xff0c;\u5b8c\u6574\u8bb0\u5f55\u72b6\u6001\u673a\u4e0e\u53d8\u66f4\u5386\u53f2&#xff1b;\u589e\u91cf\u6388\u6743\u6269\u5c55\u540c\u4e00 grant&#xff0c;\u7f29\u5c0f\u8303\u56f4\u5373\u65f6\u751f\u6548\u3002<\/li>\n<li>refresh token \u6309\u5bb6\u65cf\u8f6e\u6362\u5e76\u505a\u91cd\u7528\u68c0\u6d4b&#xff0c;\u5931\u6548\u7edf\u4e00\u8fd4\u56de invalid_grant&#xff0c;\u4e3a\u5e76\u53d1\u5237\u65b0\u8bbe\u7f6e\u77ed\u5bbd\u9650\u7a97\u53e3\u3002<\/li>\n<li>MCP server \u6bcf\u4e2a\u8bf7\u6c42\u90fd\u68c0\u67e5 grant \u72b6\u6001\u4e0e\u5ba2\u6237\u7aef\u5f00\u5173&#xff0c;\u4ee5 SSF&#xff0f;CAEP \u4e8b\u4ef6\u9a71\u52a8\u672c\u5730\u64a4\u9500\u8868&#xff0c;\u5e76\u7528 \u2264 60 \u79d2\u7684\u5b9a\u671f\u540c\u6b65\u515c\u5e95\u3002<\/li>\n<li>\u8d26\u6237\u4e8b\u4ef6\u8054\u52a8\u64a4\u9500&#xff1a;\u8bbe\u5907\u91cd\u65b0\u7ed1\u5b9a\u3001\u7591\u4f3c\u6b3a\u8bc8\u6807\u8bb0\u65f6\u81ea\u52a8\u64a4\u9500\u8be5\u7528\u6237\u5168\u90e8 AI \u6388\u6743&#xff1b;\u4e0d\u4f9d\u8d56 AI \u5e73\u53f0\u901a\u77e5\u64a4\u9500\u3002<\/li>\n<li>\u5728 App \u4e2d\u63d0\u4f9b\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3&#xff1a;\u53ef\u4fe1\u7684\u5ba2\u6237\u7aef\u8eab\u4efd\u3001\u4eba\u8bdd\u6743\u9650\u3001\u989d\u5ea6\u6d88\u8017\u3001\u6700\u8fd1\u6d3b\u52a8\u3001\u79fb\u9664\u8d26\u6237\u3001\u8c03\u4f4e\u989d\u5ea6\u3001\u6682\u505c\u3001\u64a4\u9500\u4e0e\u603b\u5f00\u5173&#xff1b;\u6269\u5927\u6743\u9650\u53ea\u80fd\u7ecf\u7531 OAuth \u91cd\u65b0\u540c\u610f\u3002<\/li>\n<hr \/>\n<h3>\u53c2\u8003\u8d44\u6599<\/h3>\n<ul>\n<li>IETF, draft-ietf-oauth-v2-1-13 \u00a74.3&#xff08;Refresh Token Grant&#xff1b;refresh token \u8f6e\u6362\u4e0e\u6301\u6709\u8005\u7ea6\u675f&#xff09;.<\/li>\n<li>IETF, RFC 7009 OAuth 2.0 Token Revocation&#xff1b;RFC 7662 OAuth 2.0 Token Introspection&#xff1b;RFC 9068.<\/li>\n<li>OpenID Foundation, Shared Signals Framework 1.0&#xff08;Final&#xff09;. https:\/\/openid.net\/specs\/openid-sharedsignals-framework-1_0-final.html<\/li>\n<li>OpenID Foundation, OpenID Continuous Access Evaluation Profile 1.0&#xff08;Final&#xff09;. https:\/\/openid.net\/specs\/openid-caep-1_0-final.html<\/li>\n<li>Model Context Protocol Specification 2026-07-28, Authorization \u2014 Refresh Tokens&#xff1b;Security Considerations \u2014 Token Theft. https:\/\/modelcontextprotocol.io\/specification\/2026-07-28\/basic\/authorization<\/li>\n<li>Anthropic, Authentication for connectors \u2014 Token refresh. https:\/\/claude.com\/docs\/connectors\/building\/authentication<\/li>\n<li>HKMA, \u201cE-Banking Security ABC\u201d&#xff08;\u9644\u4ef6&#xff0c;2025-04-11&#xff09;.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u7cfb\u5217&#xff1a;\u300a\u8ba9 AI \u66ff\u4f60\u529e\u94f6\u884c\u4e1a\u52a1&#xff1a;\u9762\u5411 MCP Connector \u7684\u8eab\u4efd\u8ba4\u8bc1\u4e0e\u6388\u6743\u8bbe\u8ba1\u300b \u89c4\u8303\u57fa\u7ebf&#xff1a;OAuth 2.1 draft-ietf-oauth-v2-1-13&#xff1b;RFC 7009&#xff1b;RFC 7662&#xff1b;OpenID Shared Signals Framework 1.0 \u4e0e CAEP 1.0&#xff08;Final&#xff0c;2025&#xff09;&#xff1b;MCP 202<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[3179],"topic":[],"class_list":["post-121811","post","type-post","status-publish","format-standard","hentry","category-server","tag-3179"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/121811.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u7cfb\u5217&#xff1a;\u300a\u8ba9 AI \u66ff\u4f60\u529e\u94f6\u884c\u4e1a\u52a1&#xff1a;\u9762\u5411 MCP Connector \u7684\u8eab\u4efd\u8ba4\u8bc1\u4e0e\u6388\u6743\u8bbe\u8ba1\u300b \u89c4\u8303\u57fa\u7ebf&#xff1a;OAuth 2.1 draft-ietf-oauth-v2-1-13&#xff1b;RFC 7009&#xff1b;RFC 7662&#xff1b;OpenID Shared Signals Framework 1.0 \u4e0e CAEP 1.0&#xff08;Final&#xff0c;2025&#xff09;&#xff1b;MCP 202\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/121811.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-03T10:57:05+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"15 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/121811.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/121811.html\",\"name\":\"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-11-03T10:57:05+00:00\",\"dateModified\":\"2026-11-03T10:57:05+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/121811.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/121811.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/121811.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/121811.html","og_locale":"zh_CN","og_type":"article","og_title":"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u7cfb\u5217&#xff1a;\u300a\u8ba9 AI \u66ff\u4f60\u529e\u94f6\u884c\u4e1a\u52a1&#xff1a;\u9762\u5411 MCP Connector \u7684\u8eab\u4efd\u8ba4\u8bc1\u4e0e\u6388\u6743\u8bbe\u8ba1\u300b \u89c4\u8303\u57fa\u7ebf&#xff1a;OAuth 2.1 draft-ietf-oauth-v2-1-13&#xff1b;RFC 7009&#xff1b;RFC 7662&#xff1b;OpenID Shared Signals Framework 1.0 \u4e0e CAEP 1.0&#xff08;Final&#xff0c;2025&#xff09;&#xff1b;MCP 202","og_url":"https:\/\/www.wsisp.com\/helps\/121811.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-11-03T10:57:05+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"15 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/121811.html","url":"https:\/\/www.wsisp.com\/helps\/121811.html","name":"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-11-03T10:57:05+00:00","dateModified":"2026-11-03T10:57:05+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/121811.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/121811.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/121811.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"\u7b2c 8 \u7bc7\uff5cAuthZ\uff08\u56db\uff09\uff1atoken \u751f\u547d\u5468\u671f\u3001\u64a4\u9500\u4e0e\u7528\u6237\u6388\u6743\u7ba1\u7406\u4e2d\u5fc3"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/121811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=121811"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/121811\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=121811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=121811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=121811"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=121811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}