Question

我目前正在开发一个IOS应用程序，我想使用OAuth通过我们现有的Grails系统对此应用程序进行身份验证。 Grails系统使用以下链接中的插件设置OAuth2提供程序：

https://github.com/adaptivecomputing/grails-spring-security-oauth2-provider

OAuth提供程序已设置完毕，它可以正常运行，因为我已经测试了下面显示的网址，并且在获得访问权限后，我确实获得了预期的授权代码：

http://localhost:8080/app/oauth/authorize?response_type=code&client_id=clientId&redirect_uri=http://localhost:8080/app/

我遇到的问题是，当我从谷歌使用iOS的GTM OAuth插件时，我将其设置如下：

static NSString *const kMyClientID = @"1";
static NSString *const kMyClientSecret = @"secret";
static NSString *const kKeychainItemName = @"systemKeychain";

- (GTMOAuth2Authentication *)systemAuth
{

    // Set the token URL to the system token endpoint.
    NSURL *tokenURL = [NSURL URLWithString:@"http://www.systemurl.co.uk/oauth/token"];

    // Set a bogus redirect URI. It won't actually be used as the redirect will
    // be intercepted by the OAuth library and handled in the app.
    NSString *redirectURI = @"http://www.systemurl.co.uk/";

    GTMOAuth2Authentication *auth;
    auth = [GTMOAuth2Authentication authenticationWithServiceProvider:@"SYSTEM API"
                                                             tokenURL:tokenURL
                                                          redirectURI:redirectURI
                                                             clientID:kMyClientID
                                                         clientSecret:kMyClientSecret];

    return auth;
}

- (void)authorize:(NSString *)service
{
    GTMOAuth2Authentication *auth = [self systemAuth];

    // Prepare the Authorization URL. We will pass in the name of the service
    // that we wish to authorize with.
    NSURL *authURL = [NSURL URLWithString:[NSString stringWithFormat:@"http://www.systemurl.co.uk/oauth/authorize"]];

    // Display the authentication view
    GTMOAuth2ViewControllerTouch *viewController;
    viewController = [ [GTMOAuth2ViewControllerTouch alloc] initWithAuthentication:auth
                                                                  authorizationURL:authURL
                                                                  keychainItemName:kKeychainItemName
                                                                          delegate:self
                                                                  finishedSelector:@selector(viewController:finishedWithAuth:error:)];
    [viewController setBrowserCookiesURL:[NSURL URLWithString:@"http://www.systemurl.co.uk/"]];

    // Push the authentication view to our navigation controller instance
    [ [self navigationController] pushViewController:viewController animated:YES];
}


- (void)viewController:(GTMOAuth2ViewControllerTouch *)viewController
      finishedWithAuth:(GTMOAuth2Authentication *)auth
                 error:(NSError *)error
{
    if (error != nil)
    {
        // Authentication failed
        UIAlertView *alertView = [ [UIAlertView alloc] initWithTitle:@"Authorization Failed"
                                                             message:[error localizedDescription]
                                                            delegate:self
                                                   cancelButtonTitle:@"Dismiss"
                                                   otherButtonTitles:nil];
        [alertView show];
    }
    else
    {
        // Authentication succeeded

        // Assign the access token to the instance property for later use
        self.accessToken = auth.accessToken;

        // Display the access token to the user
        UIAlertView *alertView = [ [UIAlertView alloc] initWithTitle:@"Authorization Succeeded"
                                                             message:[NSString stringWithFormat:@"Access Token: %@", auth.accessToken]
                                                            delegate:self
                                                   cancelButtonTitle:@"Dismiss"
                                                   otherButtonTitles:nil];
        [alertView show];
    }
}

问题是，当我运行上面的代码时，它将我重定向到系统并且我登录，然后页面出现让我授予访问此应用程序的权限，然后我点击＆＃34;授权＆＃34;该应用程序向我显示一个警告视图，其中包含错误500.

所以我回到Grails系统并查看日志以查看发生了什么，我注意到应用程序传入的URL是：

"GET /oauth/authorize?client_id=1&redirect_uri=http%3A%2F%2Fwww.systemurl.co.uk%2F&response_type=code HTTP/1.1" 302 -

"GET /oauth/authorize?client_id=1&redirect_uri=http%3A%2F%2Fwww.systemurl.co.uk%2F&response_type=code HTTP/1.1" 200 6923

"POST /oauth/authorize?client_id=1&redirect_uri=http%3A%2F%2Fwww.systemurl.co.uk%2F&response_type=code HTTP/1.1" 302 -

错误500消息如下所示：

2014-03-24 08:25:53,081 [http-8080-2] ERROR errors.GrailsExceptionResolver  - NoSuchClientException occurred when processing request: [POST] /oauth/token - parameters:
client_secret: secret
grant_type: authorization_code
redirect_uri: http://www.systemurl.co.uk/
code: 4bf5Se
client_id: 1
No client with requested id: testing. Stacktrace follows:
org.springframework.security.oauth2.provider.NoSuchClientException: No client with requested id: testing
    at grails.plugin.cache.web.filter.PageFragmentCachingFilter.doFilter(PageFragmentCachingFilter.java:179)
    at grails.plugin.cache.web.filter.AbstractFilter.doFilter(AbstractFilter.java:63)
    at grails.plugin.springsecurity.web.filter.GrailsAnonymousAuthenticationFilter.doFilter(GrailsAnonymousAuthenticationFilter.java:53)
    at grails.plugin.springsecurity.web.authentication.RequestHolderAuthenticationFilter.doFilter(RequestHolderAuthenticationFilter.java:49)
    at grails.plugin.springsecurity.web.authentication.logout.MutableLogoutFilter.doFilter(MutableLogoutFilter.java:82)
    at java.lang.Thread.run(Thread.java:722)

现在上面的错误会告诉我，由于某种原因，用户名被用作某个客户端ID并且我不知道为什么，因为用户名和密码是＆＃34;测试＆＃34;关于grails系统。

有人可以就可能发生这种情况的原因提供任何建议吗？

提前致谢

的的 *** 修改的 * ****

我已经调试了正在发送的HTTP请求，以下是发送的RAW请求以获取令牌：

POST /oauth/token HTTP/1.1
Host: www.systemurl.co.uk
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Accept-Language: en-us
Cookie: JSESSIONID=70EB045C21084E166A34EDA88FE155C8.28151
Accept: */*
Content-Length: 130
Connection: keep-alive
User-Agent: gtm-oauth2 com.test.OAuthGTM/1.0

client_id=1&client_secret=secret&code=VaYn8M&grant_type=authorization_code&redirect_uri=http%3A%2F%2Fwww.systemurl.co.uk%2F

Answer 1

简短的回答是：＆＃34; client_id = public＆＃34;，然后就可以了

答案很长：

如果您通过代码进行调试，则会发现InMemoryClientDetailsService中会抛出异常。

在Grails版本2.2.4中，代码看起来像这样

private Map<String, ? extends ClientDetails> clientDetailsStore = new HashMap<String, ClientDetails>();

  public ClientDetails loadClientByClientId(String clientId) throws OAuth2Exception {
    ClientDetails details = clientDetailsStore.get(clientId);
    if (details == null) {
      throw new InvalidClientException("Client not found: " + clientId);
    }
    return details;
  }

在Map clientDetailsStore中只有一个值是＆＃34; public＆＃34;

IOS的GTM OAuth无法与Grails OAuth 2提供程序一起使用

1 个答案: