Bing OAuth Rate Limit和一些细节问题 [英] Bing OAuth Rate Limit and some details question

问题描述

1。我可以知道Bing OAuth是否有一些速率限制？我们有几台机器和帐户，即使我们在系统中使用缓存，我也不确定Bing方面是否存在bockneck。如果是这样，我们需要进一步优化我们的代码。

1. Could I know if there's some rate limit for Bing OAuth? We have several machines and account, even if we use cache in our system, I am not sure if there's bockneck on Bing side. If so, we need to refine our code further.

2。最近，我正在研究Bing OAuth。在刷新access_token的过程中，我注意到有access_token和authenticaiton_token，返回了新的refresh_token。 

2. Recently, I am working on Bing OAuth. During the process of refreshing access_token, I notice there's access_token and authenticaiton_token, new refresh_token returned. 

a。 authentication_token的用法是什么？根据此处的文档http://msdn.microsoft.com/en-us/library/bing-ads-user-authentication-oauth-guide.aspx。我们应该在请求标头中使用access_token作为AuthenticationToken。我很好奇这个authentication_token是
是什么？

a. What's the usage of authentication_token? According to the documentation here http://msdn.microsoft.com/en-us/library/bing-ads-user-authentication-oauth-guide.aspx. We should use access_token as AuthenticationToken in request header. I am curious what this authentication_token is?

b。正如Bing建议我们从刷新access_token进程返回的最后一个refresh_token，我真的很想知道refresh_token的生存时间。由于access_token仅持续3600s。如果refresh_token是短暂的，这意味着每天，当我更新access_token时，我需要存储
新的refresh_token。 

b. As Bing suggest us to the last refresh_token returned from refreshing access_token process, I really like to know the living time of refresh_token. As access_token only last for 3600s. If refresh_token is short lived, that means every day, I need to store new refresh_token when I renew access_token. 

谢谢

推荐答案

以下是您提出的每个问题的答案： 

Here are proposed answers for each of your questions: 

1。 Bing Ads服务的任何限制都在此处发布：http：//msdn.microsoft.com/en-US/library/bing-ads-service-protocol.aspx#throttling。鉴于认证服务呼叫没有公布的限制，我们保留根据需要限制
的权利，以确保所有客户的服务质量。

1. Any limits for Bing Ads services are published here: http://msdn.microsoft.com/en-US/library/bing-ads-service-protocol.aspx#throttling. Whereas there are no published limits for authentication service calls, we reserve the right to throttle as needed to ensure quality of service for all clients.

2a。尽管AuthenticationToken服务标头的巧合命名，但Bing Ads并未直接使用身份验证服务提供的authentication_token。对于Bing Ads服务，将access_token用作AuthenticationToken是正确的。
据我所知，authentication_token可用于特定于应用程序的身份验证要求。例如，
Microsoft Azure移动服务将其用作JSON Web令牌。 

2a. Despite the coincidental naming of the AuthenticationToken service header, Bing Ads does not directly use authentication_token provided by the authentication service. You are correct to use the access_token as AuthenticationToken for Bing Ads services. The authentication_token as I understand it can be used for application specific authentication requirements. For example Microsoft Azure Mobile Services uses it as a JSON web token. 

2b。有关
授权码，请参阅步骤＃6授权流程提供以下发布的指南： 

2b. Please see Step #6 for authorization code grant flow which provides the following published guidance: 

虽然刷新令牌参数没有定义的有效期，但您应该期望它持续几个个月。作为最佳实践，刷新令牌应设置为检索到的最新刷新令牌的值。

Whereas the refresh token parameter does not have a defined expiration period, you should expect it to last several months. As a best practice the refresh token should be set to the value of the most recent refresh token retrieved.

您可能需要从步骤1重新开始并请求用户同意，例如Microsoft帐户用户更改了密码，从可信设备列表中删除了设备，或删除了应用程序的权限，以便代表他们进行身份验证。

You may need to start again from Step 1 and request user consent if, for example the Microsoft Account user changed their password, removed a device from their list of trusted devices, or removed permissions for your application to authenticate on their behalf.

我希望这会有所帮助！ 

I hope this helps! 

这篇关于Bing OAuth Rate Limit和一些细节问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！