使用Akka Http获取Auth Token时遭遇Timeout Exception求助

问题背景 #

我用Scala + Akka HTTP实现了OAuth2令牌获取逻辑，代码如下：

def authRequest(): Future[Either[HttpError, HttpMessage]] = {
  val http = Http(actorSystem)
  val uri = Uri("https://someendpoint/oauth2/token")
    .withQuery(Query("grant_type" -> "password", "username" -> user, "password" -> password, "client_id" -> clientId))
  val request = HttpRequest(uri = uri, method = HttpMethods.POST,
    entity = HttpEntity(ContentType(MediaTypes.`application/x-www-form-urlencoded`), ""))
  logger.debug(s"Request: ${request.toString()}")
  val src = Source.single(request)
  val connFlow = http.outgoingConnection(uri.authority.host.address(), uri.effectivePort)
  val sink = Sink.head[HttpResponse]
  val result = src.via(connFlow).toMat(sink)(Keep.right).run()
  result.map{
    response => parser.decode[Token](response.entity.toString) match {
      case Right(token) => Right(token.access_token)
      case Left(_) => Left(HttpError(Unauthorized, "Authorization exception"))
    }
  }
}

通过Await.result等待结果时触发1分钟超时：

ERROR akka.actor.ActorSystemImpl - Error during processing of request: 'Future timed out after [1 minute]'. Completing with 500 Internal Server Error response. To change default exception handling behavior, provide a custom ExceptionHandler.
java.util.concurrent.TimeoutException: Future timed out after [1 minute]

但用curl/Postman请求同一端点仅需300-400ms即可成功获取令牌。Token样例类定义：

@JsonCodec case class Token(access_token: String, expires_in: Int, token_type: String, userId: String)

核心原因分析 #

• HTTPS连接未正确处理：outgoingConnection是底层TCP连接API，默认仅支持明文HTTP通信。目标端点为HTTPS协议时，代码会尝试用明文与SSL服务端通信，导致握手失败、连接挂起，最终超时。curl/Postman会自动处理SSL握手，因此无此问题。
• 响应实体读取错误：response.entity.toString仅返回实体元数据描述，而非真实JSON payload，会导致后续解析失败，但当前超时问题由连接问题引发。
• 手动连接流程的局限性：手动构建Source+outgoingConnection+Sink的流程缺少高层API的SSL自动适配、超时控制等机制，容易出现底层连接异常。

解决方法 #

1. 改用Akka HTTP高层API singleRequest #

singleRequest会自动处理HTTPS连接（依赖JVM默认SSL上下文，自定义证书场景需额外配置），无需手动管理TCP连接，代码更简洁可靠。

2. 正确读取响应实体 #

使用toStrict方法将流式实体转换为严格实体，获取真实JSON字符串后再解析。

修正后的完整代码 #

import akka.http.scaladsl.unmarshalling.Unmarshal
import scala.concurrent.duration._

def authRequest(): Future[Either[HttpError, String]] = { // 修正返回类型与token.access_token匹配
  val http = Http(actorSystem)
  val uri = Uri("https://someendpoint/oauth2/token")
    .withQuery(Query(
      "grant_type" -> "password",
      "username" -> user,
      "password" -> password,
      "client_id" -> clientId
    ))
  val request = HttpRequest(
    uri = uri,
    method = HttpMethods.POST,
    entity = HttpEntity(ContentType(MediaTypes.`application/x-www-form-urlencoded`), "")
  )
  
  logger.debug(s"Request: $request")
  
  http.singleRequest(request).flatMap { response =>
    response.status match {
      case StatusCodes.OK =>
        // 将流式实体转为严格实体，设置5秒读取超时
        response.entity.toStrict(5.seconds).flatMap { strictEntity =>
          parser.decode[Token](strictEntity.data.utf8String) match {
            case Right(token) => Future.successful(Right(token.access_token))
            case Left(err) => Future.successful(Left(HttpError(Unauthorized, s"解析失败: ${err.getMessage}")))
          }
        }
      case other =>
        Future.successful(Left(HttpError(other, s"请求失败: ${other.reason}")))
    }
  }.recover {
    case ex: Exception => Left(HttpError(ServiceUnavailable, s"请求异常: ${ex.getMessage}"))
  }
}

3. 额外优化建议 #

• 生产环境避免使用Await.result，建议用map/flatMap链式处理Future，或结合Akka HTTP路由直接返回Future响应，阻塞操作会降低系统并发能力。
• 添加连接超时、读取超时配置：

val http = Http(actorSystem).withSettings(
  HttpConnectionSettings(actorSystem).withConnectTimeout(5.seconds).withIdleTimeout(10.seconds)
)

内容的提问来源于stack exchange，提问作者A. Vasyukhin