問題描述
我正在嘗試為此處描述的服務(wù)帳戶實施 Google oAuth 2:https://developer.google.com/accounts/docs/OAuth2ServiceAccount 在 UnityScript(或 C# - 沒關(guān)系，因為它們都使用相同的 Mono .NET 類).
I'm trying to implement Google oAuth 2 for service accounts described here: https://developers.google.com/accounts/docs/OAuth2ServiceAccount on UnityScript (or C# - that doesn't matter because they both use the same Mono .NET classes).
我在這里找到了類似的主題:Is there a JSON Web Token (JWT) example in C#?web-token-jwt-example-in-c 但我還是沒有成功.
I've found similar topic here: Is there a JSON Web Token (JWT) example in C#? web-token-jwt-example-in-c but I still don't have a success.
首先，我已經(jīng)生成了標(biāo)題和聲明集(就像在谷歌文檔中一樣)
Fist of all, I have generated header and claimset (that are just like in google documentation)
var header: String = GetJWTHeader();
var claimset: String = GetJWTClaimSet();
結(jié)果是(為清楚起見，用新行分隔):
The result is (separated with new lines for clarity):
{"alg":"RS256","typ":"JWT"}
{"alg":"RS256","typ":"JWT"}
{"iss":"425466719070-1dg2rebp0a8fn9l02k9ntr6u5o4a8lp2.apps.googleusercontent.com",
{"iss":"425466719070-1dg2rebp0a8fn9l02k9ntr6u5o4a8lp2.apps.googleusercontent.com",
"范圍":"https://www.googleapis.com/auth/prediction",
"aud":"https://accounts.google.com/o/oauth2/令牌",
"exp":1340222315,
"exp":1340222315,
"iat":1340218715}
"iat":1340218715}
Base-64 編碼方式:
Base-64 encoding methods:
public static function Base64Encode(b: byte[]): String {
var s: String = Convert.ToBase64String(b);
s = s.Replace("+", "-");
s = s.Replace("/", "_");
s = s.Split("="[0])[0]; // Remove any trailing '='s
return s;
}
public static function Base64Encode(s: String): String {
return Base64Encode(Encoding.UTF8.GetBytes(s));
}
那我要簽名了.
var to_sign: byte[] =
Encoding.UTF8.GetBytes(Base64Encode(header) + "." + Base64Encode(claimset));
var cert: X509Certificate2 =
new X509Certificate2(google_pvt_key.ToArray(), "notasecret");
var rsa: RSACryptoServiceProvider = cert.PrivateKey;
var sgn: String = Base64Encode(rsa.SignData(to_sign, "SHA256"));
var jwt: String = Base64Encode(header) + "." + Base64Encode(claimset) +
"." + sgn;
然后形成請求:
var url: String = "https://accounts.google.com/o/oauth2/token";
var form: WWWForm = new WWWForm();
form.AddField("grant_type", "assertion");
form.AddField("assertion_type", "http://oauth.net/grant_type/jwt/1.0/bearer");
form.AddField("assertion", jwt);
var headers: Hashtable = form.headers;
headers["Content-Type"] = "application/x-www-form-urlencoded";
var www: WWW = new WWW(url, form.data, headers);
我得到的只是錯誤 400:錯誤請求".
編碼后的數(shù)據(jù)看起來像(為清楚起見添加了換行符):
The encoded data looks like (line breaks added for clarity):
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.
eyJpc3MiOiI0MjU0NjY3MTkwNzAtMWRnMnJlYnAwYThmbjlsMDJrOW50cjZ1NW80YThscDIuYXBwcy5nb29nbGV1c2VyY29udGVudC5jb20iLCJzY29wZSI6Imh0dHBzOi8vd3d3Lmdvb2dsZWFwaXMuY29tL2F1dGgvcHJlZGljdGlvbiIsImF1ZCI6Imh0dHBzOi8vYWNjb3VudHMuZ29vZ2xlLmNvbS9vL29hdXRoMi90b2tlbiIsImV4cCI6MTM0MDIyMjMxNSwiaWF0IjoxMzQwMjE4NzE1fQ.
eyJpc3MiOiI0MjU0NjY3MTkwNzAtMWRnMnJlYnAwYThmbjlsMDJrOW50cjZ1NW80YThscDIuYXBwcy5nb29nbGV1c2VyY29udGVudC5jb20iLCJzY29wZSI6Imh0dHBzOi8vd3d3Lmdvb2dsZWFwaXMuY29tL2F1dGgvcHJlZGljdGlvbiIsImF1ZCI6Imh0dHBzOi8vYWNjb3VudHMuZ29vZ2xlLmNvbS9vL29hdXRoMi90b2tlbiIsImV4cCI6MTM0MDIyMjMxNSwiaWF0IjoxMzQwMjE4NzE1fQ.
lIFg7-Og_BcC5qpICLt7USwGIHUOz-vV4ADNq0AWhuRtsvFrbZn5mxk4n9r5qU66q4reTVVAtuW06DeGsdcBMNgEdIMvN6VuYQybs64p9mqrfECBYxO1FWHbUG-2On1IpowybEsRRUjZfp0jFuEY7S
lIFg7-Og_BcC5qpICLt7USwGIHUOz-vV4ADNq0AWhuRtsvFrbZn5mxk4n9r5qU66q4reTVVAtuW06DeGsdcBMNgEdIMvN6VuYQybs64p9mqrfECBYxO1FWHbUG-2On1IpowybEsRRUjZfp0jFuEY7SLE3XRaXan0k5zmejcvLQo
我花了兩天時間試圖找出問題所在，但我看不到.
I've spent two days trying to figure out what is wrong but I can't see.
另外，我找不到任何合適的文檔和示例.
Also, I couldn't find any suitable documentation and examples.
我只是想收到一個令牌.
I'm trying just to recieve a token.
- 我是否以正確的方式簽署字節(jié)?
- 聲明集中的范圍"參數(shù)應(yīng)該是什么樣的?我試過https://www.googleapis.com/auth/devstorage.readonly"和https://www.googleapis.com/auth/prediction".
- iss"參數(shù)應(yīng)該等于什么?客戶 ID 或電子郵件地址?(都試過了)
- 有什么方法可以找出我的錯誤?
- 是否有任何用于服務(wù)應(yīng)用程序的 C# 庫(不適用于已安裝的應(yīng)用程序或客戶端登錄)?
我快瘋了......它必須工作，但它沒有......:-/
I'm getting crazy... It has to work, but it doesn't... :-/
推薦答案
解決方案是在請求代碼中所有斜杠都必須反斜杠
The solution was that in request code all slashes have to be backslashed
錯誤:
"scope":"https://www.googleapis.com/auth/prediction",
"aud":"https://accounts.google.com/o/oauth2/token",
正確:
"scope":"https:\/\/www.googleapis.com\/auth\/prediction",
"aud":"https:\/\/accounts.google.com\/o\/oauth2\/token",
這篇關(guān)于用于服務(wù)應(yīng)用程序的 Google oAuth 2.0(JWT 令牌請求)的文章就介紹到這了，希望我們推薦的答案對大家有所幫助，也希望大家多多支持html5模板網(wǎng)！