Question

由于谷歌已被弃用，我找不到任何有效的Oauth 1.0支持。但是，由于我想访问Gmail数据，我必然会使用Oauth 1.0

所以我从2天后就一直在尝试为我的Google应用程序获取RequestToken，并且我收到了无效的签名错误。我的基本字符串与google返回的调试字符串匹配。

我尝试过使用HMAC-SHA1和RSA-SHA1，我的密钥是正确的。（我甚至尝试使用令牌和秘密作为匿名，Google推荐用于未注册的应用程序。）可能是由于错误的nonce或由于某些百分比编码问题导致的。相同的方法适用于Twitter。

我也在下面粘贴我的代码，如果有人可以帮助或指向正确的论坛，我会很高兴。

    $('#GMAIL_BUTTON').click(function () {
    //oauth1 approach similar to twitter
    var requestUrl = "https://www.google.com/accounts/OAuthGetRequestToken";
    var scope = "https://mail.google.com/";
    var clientID = "anonymous";
    var clientSecret = "anonymous";
    var rsakey = "MIICblahblahblah";
    var timestamp = Math.round(new Date().getTime() / 1000.0);
    var nonce = Math.random();        
    var sigBaseStringParams = "oauth_consumer_key=" + clientID;
    sigBaseStringParams += "&" + "oauth_nonce=" + nonce;
    sigBaseStringParams += "&" + "oauth_signature_method=HMAC-SHA1";
    sigBaseStringParams += "&" + "oauth_timestamp=" + timestamp;
    sigBaseStringParams += "&" + "scope=" + encodeURIComponent(scope);
    var sigBaseString = "GET&";
    sigBaseString += encodeURIComponent(requestUrl) + "&" +        encodeURIComponent(sigBaseStringParams) + "\n" + "\n";
    requestUrl += "?scope=https://mail.google.com/";
    var keyText = encodeURIComponent(clientSecret) + "&";
    //var keyText = rsakey;
    var keyMaterial =     Windows.Security.Cryptography.CryptographicBuffer.convertStringToBinary(keyText, Windows.Security.Cryptography.BinaryStringEncoding.Utf8);
    var macAlgorithmProvider = Windows.Security.Cryptography.Core.MacAlgorithmProvider.openAlgorithm("HMAC_SHA1");
    var key = macAlgorithmProvider.createKey(keyMaterial);
    //var keyMaterial = Windows.Security.Cryptography.CryptographicBuffer.decodeFromBase64String(rsakey);
    //var macAlgorithmProvider = Windows.Security.Cryptography.Core.AsymmetricKeyAlgorithmProvider.openAlgorithm("RSASIGN_PKCS1_SHA1");
    //var key = macAlgorithmProvider.importKeyPair(keyMaterial);
    var tbs = Windows.Security.Cryptography.CryptographicBuffer.convertStringToBinary(sigBaseString, Windows.Security.Cryptography.BinaryStringEncoding.Utf8);
    var signatureBuffer = Windows.Security.Cryptography.Core.CryptographicEngine.sign(key, tbs);
    var signature =    Windows.Security.Cryptography.CryptographicBuffer.encodeToBase64String(signatureBuffer);
    var dataToPost = "OAuth oauth_consumer_key=\"" + clientID + "\", oauth_nonce=\"" + nonce + "\", oauth_signature_method=\"HMAC-SHA1\", oauth_timestamp=\"" + timestamp + "\", oauth_signature=\"" + encodeURIComponent(signature) + "\", oauth_version=\"1.0\"";
    var response = sendGetRequest(requestUrl, dataToPost, null);
});

SendGetRequest方法是 -

   function sendGetRequest(url, authzheader, params) {
    try {
        var request = new XMLHttpRequest();
        request.open("GET", url, false);
        request.setRequestHeader("Authorization", authzheader);
        request.send(params);
        return request.responseText;
    } catch (err) {
        WinJS.log("Error sending request: " + err, "Web Authentication SDK Sample", "error");
    }
}

Answer 1

我在代码中找不到任何明显错误，但您可能会更轻松地在https://developers.google.com/accounts/docs/OAuth2UserAgent使用Google的OAuth 2作为客户端应用程序库。此外，您可能希望使用原子Feed范围（https://mail.google.com/mail/feed/atom） - 您可以在https://code.google.com/oauthplayground/尝试使用它和其他范围。

oauth 1.0-无效的签名GetRequestToken for Google

1 个答案: