问题排查手册

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/connections?userId=alice" \
  -H 'X-Admin-Secret: dev-admin'

# 连接统计：在线用户数 / 会话数 / 今日峰值
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/connections/stats" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/users/alice" \
  -H 'X-Admin-Secret: dev-admin'

# 重新签发 Token（返回 data.token，7 天有效）
curl -sS -X POST "http://127.0.0.1:8080/api/admin/apps/demo/users/alice/token" \
  -H 'X-Admin-Secret: dev-admin'

# 让旧 Token 全部失效（会向在线端推送 kick，code=1002）
curl -sS -X POST "http://127.0.0.1:8080/api/admin/apps/demo/users/alice/token/reset" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/users/alice" \
  -H 'X-Admin-Secret: dev-admin'

# 服务开通项（8 个 service key）
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/services" \
  -H 'X-Admin-Secret: dev-admin'

# 功能开关（映射到服务开通项与推送开关）
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/features" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/messages?userId=alice&limit=1" \
  -H 'X-Admin-Secret: dev-admin'

# 用上一步返回的 messageId 查轨迹
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/messages/<MESSAGE_ID>/trace" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/messages/<MESSAGE_ID>/trace" \
  -H 'X-Admin-Secret: dev-admin'

# 服务端当前连接（重连后应为新 sessionId）
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/connections?userId=alice" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/callbacks" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/callbacks/deliveries?status=failed&limit=20" \
  -H 'X-Admin-Secret: dev-admin'

# 取上一步 items[].deliveryId 重试
curl -sS -X POST "http://127.0.0.1:8080/api/admin/apps/demo/callbacks/deliveries/<DELIVERY_ID>/retry" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X POST "http://127.0.0.1:8080/api/admin/apps/demo/callbacks/test" \
  -H 'X-Admin-Secret: dev-admin' \
  -H 'content-type: application/json' \
  -d '{"eventType":"test.ping","payload":{"hello":"world"}}'

# 修改回调地址/密钥/事件（secret 传空串表示不修改）
curl -sS -X POST "http://127.0.0.1:8080/api/admin/apps/demo/callbacks" \
  -H 'X-Admin-Secret: dev-admin' \
  -H 'content-type: application/json' \
  -d '{"enabled":true,"url":"https://example.com/im/callback","secret":"new-secret","events":["message.routed","message.offline"]}'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/sensitive-words" \
  -H 'X-Admin-Secret: dev-admin'

# 默认只返回 pending；status 支持 pending/approved/rejected
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/moderation/tasks?status=pending&limit=20" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/ratelimit" \
  -H 'X-Admin-Secret: dev-admin'

# 关闭某个操作的 QPS 限制（qps=0 表示不限制）
curl -sS -X POST "http://127.0.0.1:8080/api/admin/apps/demo/ratelimit" \
  -H 'X-Admin-Secret: dev-admin' \
  -H 'content-type: application/json' \
  -d '{"overrides":{"message.private.publish":0}}'

# 查看/调整群成员配额
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/services" \
  -H 'X-Admin-Secret: dev-admin'

curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/audit?limit=20" \
  -H 'X-Admin-Secret: dev-admin'

# 只看封禁相关动作
curl -sS -X GET "http://127.0.0.1:8080/api/admin/apps/demo/audit?action=admin.users.ban&limit=20" \
  -H 'X-Admin-Secret: dev-admin'

// triage.mjs — 按 messageId 输出：轨迹 → 接收者连接 → 回调投递 → 最近审计
const HOST = process.env.IM_HOST || 'http://127.0.0.1:8080';
const SECRET = process.env.IM_ADMIN_SECRET || 'dev-admin';
const APPKEY = process.env.IM_APPKEY || 'demo';
const MESSAGE_ID = process.env.IM_MESSAGE_ID || 'm_10001'; // 变量：先用 /messages 查到
const USER_ID = process.env.IM_USER_ID || 'bob';          // 变量：接收者

async function api(path) {
  const res = await fetch(HOST + '/api/admin/apps/' + APPKEY + path, {
    headers: { 'X-Admin-Secret': SECRET },
  });
  if (!res.ok) throw new Error(path + ' -> HTTP ' + res.status + ' ' + (await res.text()));
  return (await res.json()).data;
}

const trace = await api('/messages/' + encodeURIComponent(MESSAGE_ID) + '/trace');
console.log('轨迹:', JSON.stringify({
  status: trace.status,
  ackAt: trace.ackAt,
  deliveredSessions: trace.deliveredSessions,
  offlineQueued: trace.offlineQueued,
  routed: trace.routed,
}, null, 2));

const conns = await api('/connections?userId=' + encodeURIComponent(USER_ID));
console.log('接收者会话数:', conns.total, JSON.stringify(conns.connections.map((c) => c.sessionId)));

const deliveries = await api('/callbacks/deliveries?limit=5');
console.log('最近回调投递:', JSON.stringify(deliveries.items.map((d) => ({
  eventType: d.eventType, status: d.status, responseCode: d.responseCode, error: d.error,
})), null, 2));

const audit = await api('/audit?limit=5');
console.log('最近审计:', JSON.stringify(audit.items.map((a) => ({
  action: a.action, object: a.object, result: a.result,
})), null, 2));

# 1017：AppKey 不存在（签名头仍需齐全，服务端先查应用）
curl -sS -i -X POST "http://127.0.0.1:8080/im/v2/user/get" \
  -H 'App-Key: no-such-app' -H 'Nonce: 9f2a7c1b' -H 'Timestamp: 1750000000000' -H 'Signature: deadbeef' \
  -H 'content-type: application/json' -d '{"userId":"alice"}'

# 1019：Timestamp 超出 ±300000ms（用一个明显过期的时间戳）
curl -sS -i -X POST "http://127.0.0.1:8080/im/v2/user/get" \
  -H 'App-Key: demo' -H 'Nonce: 9f2a7c1c' -H 'Timestamp: 1' -H 'Signature: deadbeef' \
  -H 'content-type: application/json' -d '{"userId":"alice"}'