private static AccessToken getAccessTokenOfAuthorizationCodeMode(HttpServletRequest request, OAuthConfig oAuthConfig) throws JapOauth2Exception {
String state = request.getParameter("state");
Oauth2Util.checkState(state, oAuthConfig.getClientId(), oAuthConfig.isVerifyState());
String code = request.getParameter("code");
Map<String, String> params = new HashMap<>(6);
params.put("grant_type", Oauth2GrantType.authorization_code.name());
params.put("code", code);
params.put("client_id", oAuthConfig.getClientId());
params.put("client_secret", oAuthConfig.getClientSecret());
if (StrUtil.isNotBlank(oAuthConfig.getCallbackUrl())) {
   params.put("redirect_uri", oAuthConfig.getCallbackUrl());
}
if (Oauth2ResponseType.code == oAuthConfig.getResponseType() && oAuthConfig.isEnablePkce()) {
   params.put(PkceParams.CODE_VERIFIER, PkceHelper.getCacheCodeVerifier(oAuthConfig.getClientId()));
}
Kv tokenInfo = Oauth2Util.request(oAuthConfig.getAccessTokenEndpointMethodType(), oAuthConfig.getTokenUrl(), params);
Oauth2Util.checkOauthResponse(tokenInfo, "Oauth2Strategy failed to get AccessToken.");
if (!tokenInfo.containsKey("access_token")) {
   throw new JapOauth2Exception("Oauth2Strategy failed to get AccessToken." + tokenInfo.toString());
}
return mapToAccessToken(tokenInfo);
}

private JapUser getUserInfo(OAuthConfig oAuthConfig, AccessToken accessToken) throws JapOauth2Exception {
    Map<String, String> params = new HashMap<>(6);
    params.put("access_token", accessToken.getAccessToken());
    Kv userInfo = Oauth2Util.request(oAuthConfig.getUserInfoEndpointMethodType(), oAuthConfig.getUserinfoUrl(), params);
    Oauth2Util.checkOauthResponse(userInfo, "Oauth2Strategy failed to get userInfo with accessToken.");
    JapUser japUser = this.japUserService.createAndGetOauth2User(oAuthConfig.getPlatform(), userInfo, accessToken);
    if (ObjectUtil.isNull(japUser)) {
        return null;
    }
    return japUser;
}

<dependency>
 <groupId>com.fujieid</groupId>
 <artifactId>jap-oauth2</artifactId>
 <version>1.0.2</version>
</dependency>

//OAuth2.0需要的各个配置（相应的接口、授权类型等）
private static OAuthConfig config = new OAuthConfig();
//OAuth2.0 授权策略类，用于接收重定向redirect_uri和接收code换取token，拿到用户信息等，属于JAP验证授权的最外部接口。
private  Oauth2Strategy oauth2Strategy = new Oauth2Strategy(japUserService, new JapConfig());
@ActionKey("/oauth/code/getData")
public void getBaseData(){
//获取参数，这里是为了方便测试者以页面通用的方式进行输入，而不是修改源代码。但参数clientSecret等一般很重要，实际开发下不会这样使用
     String clientId = this.getRequest().getParameter("clientId");
     String clientSecrect = this.getRequest().getParameter("clientSecret");
     String redirectURI = this.getRequest().getParameter("redirectURI");
     config.setPlatform("gitee")
             .setState(UuidUtils.getUUID())
             .setClientId(clientId)
             .setClientSecret(clientSecrect)
             .setCallbackUrl(redirectURI)
             .setAuthorizationUrl("https://gitee.com/oauth/authorize")
             .setTokenUrl("https://gitee.com/oauth/token")
             .setUserinfoUrl("https://gitee.com/api/v5/user")
             .setScopes(new String[]{"user_info"})
             .setResponseType(Oauth2ResponseType.code)
             .setGrantType(Oauth2GrantType.authorization_code)
             .setUserInfoEndpointMethodType(Oauth2EndpointMethodType.GET);
  this.renderAuth();
}

@ActionKey("/oauth/code")
public void renderAuth() {
 String code = this.getRequest().getParameter("code");  
 JapResponse japResponse = oauth2Strategy.authenticate(config, this.getRequest(), this.getResponse());
 if (!japResponse.isSuccess()) {
     renderJson("/?error=" + URLUtil.encode(japResponse.getMessage()));
 }
 if (japResponse.isRedirectUrl()) {    
 renderJson(RetKit.ok("toAuth",(String)japResponse.getData()));
  } else {
     JapUser japUser = (JapUser) japResponse.getData();
   renderJson(RetKit.ok("userInfos",japUser));
  }
}

<dependency>
<groupId>com.fujieid</groupId>
<artifactId>jap-oidc</artifactId>
<version>1.0.1</version>
</dependency>

private OidcStrategy oidcStrategy = new OidcStrategy(japUserService, new JapConfig());
private static OidcConfig config = new OidcConfig();
@ActionKey("/oidc/getData")
public void getBaseData(){
//获取参数，这里是为了方便测试者以页面通用的方式进行输入，而不是修改源代码。但参数clientSecret等一般很重要，实际开发下不会这样使用
 String clientId = this.getRequest().getParameter("clientId");
 String clientSecrect = this.getRequest().getParameter("clientSecret");
 String redirectURI = this.getRequest().getParameter("redirectURI");    
// 配置 OIDC 的 Issue 链接
 config.setIssuer("https://oauth.aliyun.com")
       .setPlatform("aliyun")
       .setState(UuidUtils.getUUID())
       .setClientId(clientId)
       .setClientSecret(clientSecrect)
       .setCallbackUrl(redirectURI)
       .setScopes(new String[]{"aliuid","openid","profile"})
       .setResponseType(Oauth2ResponseType.code)
       .setGrantType(Oauth2GrantType.authorization_code);
logger.info("拿到参数，开始准备重定向授权页面");
this.renderAuth();
}
@ActionKey("/oidc/auth")
public void renderAuth() {
JapResponse japResponse = oidcStrategy.authenticate(config, this.getRequest(), this.getResponse());
if (!japResponse.isSuccess()) {
   System.out.println(japResponse.getMessage());
   renderText("/?error=" + URLUtil.encode(japResponse.getMessage()));
}
if (japResponse.isRedirectUrl()) {
   renderJson(RetKit.ok("toAuth",(String)japResponse.getData()));
   logger.info("授权成功");
} else {
   JapUser japUser = (JapUser) japResponse.getData();
   Map<String,String> userInfos = new HashMap<>();
   userInfos.put("token",japUser.getToken());
   userInfos.put("username",japUser.getUsername());
   userInfos.put("userId",japUser.getUserId());
   userInfos.put("password",japUser.getPassword());
   renderJson(RetKit.ok("userInfos",userInfos));
}
}