Google API HTTP 401 - 令牌无效 - AuthSub令牌的范围有误 [英] Google API HTTP 401 - Token invalid - AuthSub token has wrong scope
本文介绍了Google API HTTP 401 - 令牌无效 - AuthSub令牌的范围有误的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！
问题描述
我在通过C＃应用程序向谷歌站点API发送了一个后期请求的同时，正在苦苦挣扎谷歌API。
首先，我从谷歌的账户中兑换授权码服务器的GET请求： https://accounts.google.com/o/oauth2/auth？
scope = email％20profile&
state = security_token％3D138r5719ru3e1％26url％3Dhttps：//oa2cb.mydomain/myHome&
redirect_uri = http：// localhost&
response_type = code&
client_id = //客户ID在这里...
access_type = online&
approval_prompt = auto
在redirect uri中，我得到了我用来声明的授权码
访问令牌：
字符串RequestUrl;
RequestUrl =https://www.googleapis.com/oauth2/v3/token;
WebRequest请求= WebRequest.Create（RequestUrl）;
request.Method =POST;
//创建POST数据并将其转换为字节数组。
string postData =code = 4 / aPJAhLvlGLxw1fjKDCOpEQjfoVtNDZYq7FzvrziUero＃& +
client_id = // cilent id here& +
client_secret =客户端密钥在这里& +
redirect_uri = http：// localhost& +
grant_type = authorization_code;
byte [] byteArray = Encoding.UTF8.GetBytes（postData）;
request.ContentType =application / x-www-form-urlencoded;
request.ContentLength = byteArray.Length;
Stream dataStream = request.GetRequestStream（）;
dataStream.Write（byteArray，0，byteArray.Length）;
dataStream.Close（）;
WebResponse response = request.GetResponse（）;
Console.WriteLine（（（HttpWebResponse）响应）.StatusDescription）;
dataStream = response.GetResponseStream（）;
StreamReader reader = new StreamReader（dataStream）;
string responseFromServer = reader.ReadToEnd（）;
Console.WriteLine（responseFromServer）;
reader.Close（）;
dataStream.Close（）;
response.Close（）;
包含该令牌的回复如下所示：
{
access_token：ya29.pAGX8f4e0ZyBazzq5rxWVS6lL1jRyj0_GCog5UEO09FiGT2h4cj10jee4ziAoA09vHRoVejN5p7Iw，
token_type：持票人，
expires_in：3600，
id_token：eyJhbGciOiJSUzI1NiIsImtpZCI6IjE2NWQ2MzcwZTgzOTI5YmE4Y2E4ZWU5OTMzZTExZjg2Yzg4YzAwNjUifQ.eyJpc3MiOiJhY2NvdW50cy5nb29nbGUuY29tIiwic3ViIjoiMTA1OTc0NjQwMTUzNzU0NjU1MDE5IiwiYXpwIjoiOTkwMzUxMjA1MzY4LXBudGYxZXNtaXQ3a3Zlbmg5cnRvbW5pMmdhMmY0N2ZsLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiZW1haWwiOiJuaXIuazFAaGFpZmFuZXQub3JnLmlsIiwiYXRfaGFzaCI6Imc5MU5wOVRYS2JUaVEzcFpTM2Ewa1EiLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwiYXVkIjoiOTkwMzUxMjA1MzY4LXBudGYxZXNtaXQ3a3Zlbmg5cnRvbW5pMmdhMmY0N2ZsLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiaGQiOiJoYWlmYW5ldC5vcmcuaWwiLCJpYXQiOjE0MzU4MjI2ODAsImV4cCI6MTQzNTgyNjI4MH0.CeaQ8S3GG-yeAwqjU1ixdB7ro2SVKp2QdVTXNWl6196oJeQU1LFLpZ9FtrpNEGSDKHXrO5zx0ldE52RYw8TwMKILUqqCHLOewVJQMjZ6tiPzt-b-qeUta6Op4Z9He rwkMK2sofl88G-XZ6jKc7gk1gGPVcATBU7x0-QPRhQxmDUzP7zceVeoOtBD8g7liVHakK9sA5RNonGt-N6SvzECqhSLss7kDuXc4dStnENhyv_9oTIpvVsQplE-cJz7fDHC7mkW7BfwsgKBE8XbruBz5-o3AG5RVGyUTYqDaoq9qr3_NqckiRISUS127scaYwcYPE22Q8L_2AnpfJU0vuxo6g
}
和的最后一步就是使用 access_token
来调用google api：
HttpWebRequest req =（HttpWebRequest）System.Net.WebRequest.Create（https://sites.google.com/feeds/site/mydomain）;
req.ContentType =application / atom + xml;
req.Host =sites.google.com;
req.Method =POST;
req.Headers [Gdata-version] =1.4;
req.Headers [Authorization] =持票人ya29.pAGX8f4e0ZyBazzq5rxWVS6lL1jRyj0_GCog5UEO3FiGT2h4cj10jee4ziAoA09vHRoVejN5p7Iw;
byte [] bytes = System.Text.Encoding.ASCII.GetBytes（< entry xmlns ='http：//www.w3.org/2005/Atom'xmlns：sites ='http ：//schemas.google.com/sites/2008>< title>源网站< / title>< summary>一个新网站，用于存放记忆< / summary>< sites：theme> slate< / sites：主题>< /条目>中）;
req.ContentLength = bytes.Length;
using（Stream os = req.GetRequestStream（））
{
os.Write（bytes，0，bytes.Length）;
尝试
{
using（System.Net.WebResponse resp = req.GetResponse（））
{
使用（System.IO.StreamReader sr = new System.IO.StreamReader（resp.GetResponseStream（）））
{
string i = sr.ReadToEnd（）。Trim（）;
}
}
}
catch（WebException ex）
{
using（var stream = ex.Response.GetResponseStream（））
使用（var reader = new StreamReader（stream））
{
Console.WriteLine（reader.ReadToEnd（））;
$ b 但是在这一步的最后，我得到了一个401 http错误。
令牌无效 - AuthSub令牌有错误的范围
我做错了什么？
在此先感谢
解决方案您使用以下范围验证您的用户
scope = email％20profile&
Sites Data API使用以下范围： https://sites.google.com/feeds/ 。
I'm struggling with google api for a few days while sending a post request to Google sites API via C# application.
First I redeem the authorization code from google's servers by a GET request:
https://accounts.google.com/o/oauth2/auth?
scope=email%20profile&
state=security_token%3D138r5719ru3e1%26url%3Dhttps://oa2cb.mydomain/myHome&
redirect_uri=http://localhost&
response_type=code&
client_id= // CLIENT ID here...
access_type=online&
approval_prompt=auto
In the redirect uri I got the authorization code which I use to claim the
access token:
string RequestUrl;
RequestUrl = "https://www.googleapis.com/oauth2/v3/token";
WebRequest request = WebRequest.Create(RequestUrl);
request.Method = "POST";
// Create POST data and convert it to a byte array.
string postData = "code=4/aPJAhLvlGLxw1fjKDCOpEQjfoVtNDZYq7FzvrziUero#&" +
"client_id=//cilent id here&" +
"client_secret=client secret here&" +
"redirect_uri=http://localhost&" +
"grant_type=authorization_code";
byte[] byteArray = Encoding.UTF8.GetBytes(postData);
request.ContentType = "application/x-www-form-urlencoded";
request.ContentLength = byteArray.Length;
Stream dataStream = request.GetRequestStream();
dataStream.Write(byteArray, 0, byteArray.Length);
dataStream.Close();
WebResponse response = request.GetResponse();
Console.WriteLine(((HttpWebResponse)response).StatusDescription);
dataStream = response.GetResponseStream();
StreamReader reader = new StreamReader(dataStream);
string responseFromServer = reader.ReadToEnd();
Console.WriteLine(responseFromServer);
reader.Close();
dataStream.Close();
response.Close();
The response containing the token looks like that:
{
"access_token": "ya29.pAGX8f4e0ZyBazzq5rxWVS6lL1jRyj0_GCog5UEO3FiGT2h4cj10jee4ziAoA09vHRoVejN5p7Iw",
"token_type": "Bearer",
"expires_in": 3600,
"id_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6IjE2NWQ2MzcwZTgzOTI5YmE4Y2E4ZWU5OTMzZTExZjg2Yzg4YzAwNjUifQ.eyJpc3MiOiJhY2NvdW50cy5nb29nbGUuY29tIiwic3ViIjoiMTA1OTc0NjQwMTUzNzU0NjU1MDE5IiwiYXpwIjoiOTkwMzUxMjA1MzY4LXBudGYxZXNtaXQ3a3Zlbmg5cnRvbW5pMmdhMmY0N2ZsLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiZW1haWwiOiJuaXIuazFAaGFpZmFuZXQub3JnLmlsIiwiYXRfaGFzaCI6Imc5MU5wOVRYS2JUaVEzcFpTM2Ewa1EiLCJlbWFpbF92ZXJpZmllZCI6dHJ1ZSwiYXVkIjoiOTkwMzUxMjA1MzY4LXBudGYxZXNtaXQ3a3Zlbmg5cnRvbW5pMmdhMmY0N2ZsLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29tIiwiaGQiOiJoYWlmYW5ldC5vcmcuaWwiLCJpYXQiOjE0MzU4MjI2ODAsImV4cCI6MTQzNTgyNjI4MH0.CeaQ8S3GG-yeAwqjU1ixdB7ro2SVKp2QdVTXNWl6196oJeQU1LFLpZ9FtrpNEGSDKHXrO5zx0ldE52RYw8TwMKILUqqCHLOewVJQMjZ6tiPzt-b-qeUta6Op4Z9HerwkMK2sofl88G-XZ6jKc7gk1gGPVcATBU7x0-QPRhQxmDUzP7zceVeoOtBD8g7liVHakK9sA5RNonGt-N6SvzECqhSLss7kDuXc4dStnENhyv_9oTIpvVsQplE-cJz7fDHC7mkW7BfwsgKBE8XbruBz5-o3AG5RVGyUTYqDaoq9qr3_NqckiRISUS127scaYwcYPE22Q8L_2AnpfJU0vuxo6g"
}
And the final step is to call the google api using the access_token
this way:
HttpWebRequest req = (HttpWebRequest)System.Net.WebRequest.Create("https://sites.google.com/feeds/site/mydomain");
req.ContentType = "application/atom+xml";
req.Host = "sites.google.com";
req.Method = "POST";
req.Headers["Gdata-version"] = "1.4";
req.Headers["Authorization"] = "Bearer ya29.pAGX8f4e0ZyBazzq5rxWVS6lL1jRyj0_GCog5UEO3FiGT2h4cj10jee4ziAoA09vHRoVejN5p7Iw";
byte[] bytes = System.Text.Encoding.ASCII.GetBytes("<entry xmlns='http://www.w3.org/2005/Atom' xmlns:sites='http://schemas.google.com/sites/2008'><title>Source Site</title><summary>A new site to hold memories</summary><sites:theme>slate</sites:theme></entry>");
req.ContentLength = bytes.Length;
using (Stream os = req.GetRequestStream())
{
os.Write(bytes, 0, bytes.Length);
}
try
{
using (System.Net.WebResponse resp = req.GetResponse())
{
using (System.IO.StreamReader sr = new System.IO.StreamReader(resp.GetResponseStream()))
{
string i = sr.ReadToEnd().Trim();
}
}
}
catch (WebException ex)
{
using (var stream = ex.Response.GetResponseStream())
using (var reader = new StreamReader(stream))
{
Console.WriteLine(reader.ReadToEnd());
}
}
But at the end of this step I get a 401 http error.
Token invalid - AuthSub token has wrong scope
What am I doing wrong?
Thanks in advance
解决方案 you are authenticating your users using the following scopes
scope=email%20profile&
The Sites Data API uses the following scope: https://sites.google.com/feeds/.
这篇关于Google API HTTP 401 - 令牌无效 - AuthSub令牌的范围有误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
查看全文
