ClientTokenModel oldCt = dao.getClientToken(dao.getClientTokenValue(clientId));
if (oldCt != null) {
    return oldCt;
}

SaClientModel cm = SaOAuth2Manager.getDataLoader().getClientModelNotNull(clientId);

// 生成新 Client-Token
String clientTokenValue = SaOAuth2Strategy.instance.createClientToken.execute(clientId, scopes);
ClientTokenModel ct = new ClientTokenModel(clientTokenValue, clientId, scopes);
ct.tokenType = SaOAuth2Consts.TokenType.bearer;
ct.expiresTime = System.currentTimeMillis() + (cm.getClientTokenTimeout() * 1000);
ct.extraData = new LinkedHashMap<>();
SaOAuth2Strategy.instance.workClientTokenByScope.accept(ct);

// 保存新Client-Token
dao.saveClientToken(ct);
dao.saveClientTokenIndex(ct);

return ct;