feat: align with upstream 1.5.9.9

server/utils/oauth-token.ts

@@ -0,0 +1,23 @@
+import jwt from 'jsonwebtoken'
+
+const JWT_SECRET = process.env.JWT_SECRET
+
+if (!JWT_SECRET) {
+  throw new Error('JWT_SECRET environment variable is required')
+}
+
+export interface BindingTokenPayload {
+  provider: string
+  providerUserId: string
+  providerUsername?: string
+  avatar?: string
+  // 如果有可靠的未认证用户会话ID，可以在此添加 sessionId
+}
+
+export const generateBindingToken = (payload: BindingTokenPayload): string => {
+  return jwt.sign(payload, JWT_SECRET, { expiresIn: '10m' })
+}
+
+export const verifyBindingToken = (token: string): BindingTokenPayload => {
+  return jwt.verify(token, JWT_SECRET) as BindingTokenPayload
+}