NestJS实战07：集成百度网盘API的全流程指南

一、技术背景与需求分析

在构建企业级文件管理系统时，集成第三方云存储服务成为刚需。百度网盘开放平台提供的API接口（如文件上传/下载、目录管理、分享链接生成等）可显著降低开发成本。NestJS作为基于TypeScript的后端框架，其模块化架构和依赖注入特性非常适合封装第三方服务。本方案通过构建独立的服务模块，实现与百度网盘API的无缝对接。

二、开发环境准备

2.1 百度开发者平台配置

1. 访问百度开发者中心创建应用
2. 获取API Key和Secret Key（需企业认证）
3. 启用”网盘存储服务”并配置IP白名单
4. 记录Access Key和Secret Key（建议使用KMS加密存储）

2.2 NestJS项目初始化

npm i -g @nestjs/cli
nest new baidu-drive-integration
cd baidu-drive-integration
npm install axios @nestjs/config

三、鉴权机制实现

百度网盘API采用OAuth2.0鉴权，需通过以下步骤获取access_token：

3.1 创建AuthService

// src/auth/auth.service.ts
import { Injectable } from '@nestjs/common';
import axios from 'axios';
import { ConfigService } from '@nestjs/config';
@Injectable()
export class AuthService {
  constructor(private configService: ConfigService) {}
  async getAccessToken(): Promise<string> {
    const url = 'https://openapi.baidu.com/oauth/2.0/token';
    const params = {
      grant_type: 'client_credentials',
      client_id: this.configService.get('BAIDU_API_KEY'),
      client_secret: this.configService.get('BAIDU_SECRET_KEY'),
    };
    try {
      const response = await axios.get(url, { params });
      return response.data.access_token;
    } catch (error) {
      throw new Error(`Auth failed: ${error.message}`);
    }
  }
}

3.2 配置环境变量

# .env
BAIDU_API_KEY=your_api_key
BAIDU_SECRET_KEY=your_secret_key

四、核心API封装

4.1 文件上传实现

// src/baidu-drive/baidu-drive.service.ts
import { Injectable } from '@nestjs/common';
import axios from 'axios';
import { AuthService } from '../auth/auth.service';
@Injectable()
export class BaiduDriveService {
  constructor(private authService: AuthService) {}
  async uploadFile(filePath: string, path: string): Promise<{ file_id: string }> {
    const accessToken = await this.authService.getAccessToken();
    const url = 'https://pan.baidu.com/rest/2.0/pcs/file';
    // 百度网盘API要求使用multipart/form-data
    const formData = new FormData();
    formData.append('method', 'upload');
    formData.append('access_token', accessToken);
    formData.append('path', path);
    formData.append('file', createReadStream(filePath));
    try {
      const response = await axios.post(url, formData, {
        headers: formData.getHeaders()
      });
      return response.data;
    } catch (error) {
      throw new Error(`Upload failed: ${error.response?.data?.error_msg || error.message}`);
    }
  }
}

4.2 文件列表查询

async listFiles(path: string = '/'): Promise<Array<{ path: string, size: number }>> {
  const accessToken = await this.authService.getAccessToken();
  const url = 'https://pan.baidu.com/rest/2.0/pcs/file';
  const params = {
    method: 'list',
    access_token: accessToken,
    path: encodeURIComponent(path)
  };
  const response = await axios.get(url, { params });
  return response.data.list;
}

五、高级功能实现

5.1 秒传链接生成

async getRapidUploadInfo(fileMd5: string, size: number): Promise<{ rapid_upload: boolean }> {
  const accessToken = await this.authService.getAccessToken();
  const url = 'https://pan.baidu.com/rest/2.0/pcs/file';
  const params = {
    method: 'precreate',
    access_token: accessToken,
    path: `/temp/${Date.now()}`,
    size: size,
    content-md5: fileMd5,
    isdir: 0
  };
  try {
    const response = await axios.post(url, null, { params });
    return response.data;
  } catch (error) {
    if (error.response?.data?.error_code === 31066) {
      // 文件已存在，可直接创建秒传链接
      return { rapid_upload: true };
    }
    throw error;
  }
}

5.2 批量操作优化

async batchOperations(operations: Array<{ method: string, params: object }>) {
  const accessToken = await this.authService.getAccessToken();
  const url = 'https://pan.baidu.com/rest/2.0/pcs/batch';
  const batchParams = {
    access_token: accessToken,
    requests: operations.map(op => ({
      method: op.method,
      ...op.params
    }))
  };
  return axios.post(url, batchParams);
}

六、错误处理与重试机制

6.1 自定义异常过滤器

// src/baidu-drive/exceptions/baidu-drive.exception.ts
export class BaiduDriveException extends HttpException {
  constructor(errorCode: number, message: string) {
    super({
      errorCode,
      message,
      documentation: 'https://developer.baidu.com/doc/PAN/s/9k3h7x6q2'
    }, HttpStatus.BAD_REQUEST);
  }
}

6.2 指数退避重试策略

async safeRequest<T>(
  requestFn: () => Promise<T>,
  maxRetries = 3
): Promise<T> {
  let retryCount = 0;
  while (retryCount <= maxRetries) {
    try {
      return await requestFn();
    } catch (error) {
      if (retryCount === maxRetries) throw error;
      const delay = Math.min(1000 * Math.pow(2, retryCount), 5000);
      await new Promise(resolve => setTimeout(resolve, delay));
      retryCount++;
    }
  }
}

七、性能优化建议

1. Token缓存：使用@nestjs/cache-manager缓存access_token（默认有效期30天）
2. 并发控制：限制同时上传文件数（建议≤5个）
3. 断点续传：实现分片上传逻辑（百度API支持slice参数）
4. 监控告警：集成Prometheus监控API调用成功率

八、完整模块示例

// src/baidu-drive/baidu-drive.module.ts
import { Module } from '@nestjs/common';
import { BaiduDriveService } from './baidu-drive.service';
import { AuthService } from '../auth/auth.service';
import { ConfigModule } from '@nestjs/config';
@Module({
  imports: [ConfigModule],
  providers: [BaiduDriveService, AuthService],
  exports: [BaiduDriveService]
})
export class BaiduDriveModule {}

九、安全注意事项

1. 永远不要将Secret Key硬编码在代码中
2. 使用HTTPS协议进行所有API调用
3. 限制API调用频率（百度网盘API限制6QPS）
4. 定期轮换API Key和Secret Key

十、测试用例示例

// src/baidu-drive/test/baidu-drive.service.spec.ts
describe('BaiduDriveService', () => {
  let service: BaiduDriveService;
  const mockAuthService = { getAccessToken: jest.fn() };
  beforeEach(async () => {
    const module: TestingModule = await Test.createTestingModule({
      providers: [
        BaiduDriveService,
        { provide: AuthService, useValue: mockAuthService }
      ],
    }).compile();
    service = module.get<BaiduDriveService>(BaiduDriveService);
  });
  it('should upload file successfully', async () => {
    mockAuthService.getAccessToken.mockResolvedValue('test_token');
    // 模拟axios响应
    jest.spyOn(axios, 'post').mockResolvedValue({ data: { file_id: '123' } });
    const result = await service.uploadFile('/tmp/test.txt', '/test/');
    expect(result).toEqual({ file_id: '123' });
  });
});

十一、部署建议

1. 使用Docker容器化部署
2. 配置健康检查端点
3. 设置合理的超时时间（百度API建议30秒）
4. 启用请求日志记录

通过以上实现，开发者可以在NestJS应用中高效、安全地集成百度网盘API。实际开发中，建议根据业务需求进一步封装业务逻辑，例如实现文件版本控制、自动清理过期文件等高级功能。