0

我正在编写以下代码来获取授权令牌。

将授权分配给代码变量

$code =  $this->request->query['code'];

我已删除我的客户密码以发布问题。

$clientSecret = "";

初始化卷曲

        $ch = curl_init();
        $header[]         = "Content-Type: application/x-www-form-urlencoded";

        curl_setopt($ch, CURLOPT_HTTPHEADER,     $header);
        curl_setopt($ch, CURLOPT_POST,        true);
        curl_setopt($ch, CURLOPT_POSTFIELDS, urlencode("code=".$code."&
                client_id=289710071999.apps.googleusercontent.com&
                client_secret=".$clientSecret."&
                redirect_uri=http://budzzflorist.localhost.com/users/google&
                grant_type=authorization_code"));
        curl_setopt($ch, CURLOPT_URL, "https://accounts.google.com/o/oauth2/token");
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        $request_result = curl_exec($ch);
        print_r(curl_getinfo($ch));
        echo "\n\ncURL error number:" .curl_errno($ch); // print error info
        echo "\n\ncURL error:" . curl_error($ch);
        var_dump( json_decode($request_result,true));
4

2 回答 2

0

你的电话urlencode是错误的。事实上，它实际上是对整个 post 参数字符串进行编码，只有值（而不是键）应该是 URL 编码的。

此外，您应该考虑使用以下行而不是您的行，因为 cURL 会自动为您对所有内容进行 URL 编码：

curl_setopt($ch, CURLOPT_POSTFIELDS, array(
  'code' => $code,
  'client_id' => $clientId,
  'client_secret' => $clientSecret,
  'redirect_uri' => 'http://example.org',
  'grant_type' => 'authorization_code'
));

更新：这对我有用：

请求令牌

curl_setopt_array($ch, array(
  CURLOPT_POST => false,
  CURLOPT_POSTFIELDS => array(
    'response_type' => 'code',
    'client_id' => $clientId,
    'redirect_uri' => 'http://example.org/auth/google/callback',
    'scope' => 'https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile'
  ),
  CURLOPT_URL => 'https://accounts.google.com/o/oauth2/auth',
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_RETURNTRANSFER => true
));

$request_result = curl_exec($ch);

打回来

curl_setopt_array($ch, array(
  CURLOPT_POST => true,
  CURLOPT_POSTFIELDS => array(
    'code' => $code,
    'client_id' => $clientId,
    'client_secret' => $clientSecret,
    'redirect_uri' => 'http://example.org',
    'grant_type' => 'authorization_code'
  ),
  CURLOPT_URL => 'https://accounts.google.com/o/oauth2/token',
  CURLOPT_SSL_VERIFYPEER => false,
  CURLOPT_RETURNTRANSFER => true
));

$request_result = curl_exec($ch);
于 2012-07-27T17:39:14.870 回答
0

看起来谷歌希望表单是application/x-www-urlencoded.

试试这个：

$ch           = curl_init();
$code         = '123';
$clientSecret = '45686';

$postFields = array('code'          => $code,
                    'client_id'     => '289710071999.apps.googleusercontent.com',
                    'client_secret' => $clientSecret,
                    'redirect_uri'  => 'http://budzzflorist.localhost.com/users/google',
                    'grant_type'    => 'authorization_code');

curl_setopt($ch, CURLOPT_POST,        true);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($postFields));
curl_setopt($ch, CURLOPT_URL, "https://accounts.google.com/o/oauth2/token");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$request_result = curl_exec($ch);

var_dump( json_decode($request_result,true));

结果：invalid_client因为我的令牌不正确，但不是invalid_request.

如果您将数组传递给CURLOPT_POSTFIELDS，cURL 将强制内容类型为multipart/form-data导致无效请求的原因。而是使用http_build_querywhich 从基于键值对的数组中创建一个 url 编码的查询字符串。然后将结果传递给CURLOPT_POSTFIELDS.

于 2012-07-27T18:07:51.663 回答