无法使用PHP连接到OAuth 2.0

时间:2014-05-14 16:25:21

标签: php google-oauth google-analytics-api google-api-php-client

我有一个网站,我希望向所有访问者显示我的Google Analytics帐户中的一些数据(来自不同国家/地区的独特网页浏览量)。就我而言,可以使用OAuth 2.0和Google AnalyticsAPI执行此操作。我希望身份验证能够实现自动化,以便访问我网站的任何人都可以查看此数据,而不仅仅是可以登录我的Google Analytics帐户的用户。

我做了什么

  • 使用Google Developers Console制作项目。
  • Analytics API 更改为ON
  • 创建服务帐户
  • 为服务器和浏览器应用程序生成API密钥(不知道哪些以及在哪里使用)。
  • 下载适用于PHP的Google API客户端库。
  • 上传我在创建服务帐户时下载的.p12密钥,将其上传到我的网站并链接到 google-api-php-client-master / examples / service-account.php
  • google-api-php-client-master / examples / service-account.php 中声明了我的服务帐户客户端ID。

当前代码

<?php
/*
 * Copyright 2013 Google Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
session_start();
include_once "templates/base.php";

/************************************************
  Make an API request authenticated with a service
  account.
 ************************************************/
set_include_path("../src/" . PATH_SEPARATOR . get_include_path());
require_once 'Google/Client.php';
require_once 'Google/Service/Books.php';

/************************************************
  ATTENTION: Fill in these values! You can get
  them by creating a new Service Account in the
  API console. Be sure to store the key file
  somewhere you can get to it - though in real
  operations you'd want to make sure it wasn't
  accessible from the webserver!
  The name is the email address value provided
  as part of the service account (not your
  address!)
  Make sure the Books API is enabled on this
  account as well, or the call will fail.
 ************************************************/
$client_id = 'SECRET-NUMBERS.apps.googleusercontent.com';
$service_account_name = '';
$key_file_location = 'SOMENUMBERS-privatekey.p12';

echo pageHeader("Service Account Access");
if ($client_id == 'SECRET-NUMBERS.apps.googleusercontent.com'
    || !strlen($service_account_name)
    || !strlen($key_file_location)) {
  echo missingServiceAccountDetailsWarning();
}

$client = new Google_Client();
$client->setApplicationName("Client_Library_Examples");
$service = new Google_Service_Books($client);

/************************************************
  If we have an access token, we can carry on.
  Otherwise, we'll get one with the help of an
  assertion credential. In other examples the list
  of scopes was managed by the Client, but here
  we have to list them manually. We also supply
  the service account
 ************************************************/
if (isset($_SESSION['service_token'])) {
  $client->setAccessToken($_SESSION['service_token']);
}
$key = file_get_contents($key_file_location);
$cred = new Google_Auth_AssertionCredentials(
    $service_account_name,
    array('https://www.googleapis.com/auth/analytics.readonly'),
    $key
);
$client->setAssertionCredentials($cred);
if($client->getAuth()->isAccessTokenExpired()) {
  $client->getAuth()->refreshTokenWithAssertion($cred);
}
$_SESSION['service_token'] = $client->getAccessToken();

/************************************************
  We're just going to make the same call as in the
  simple query as an example.
 ************************************************/
$optParams = array('filter' => 'free-ebooks');
$results = $service->volumes->listVolumes('Henry David Thoreau', $optParams);
echo "<h3>Results Of Call:</h3>";
foreach ($results as $item) {
  echo $item['volumeInfo']['title'], "<br /> \n";
}

echo pageFooter(__FILE__);

问题

  • google-api-php-client-master / examples / service-account.php 这段代码我不太明白:

    $service_account_name = '';

我应该在这里宣布什么?

  • 当我完成上述所有操作并在我的网站上加载 google-api-php-client-master / examples / service-account.php 页面时,我收到以下两个错误:
  

警告:您需要从Google API控制台设置客户端ID,电子邮件地址和密钥的位置

     

致命错误:未捕获的异常&#39; Google_Auth_Exception&#39;有消息&#39;错误刷新OAuth2令牌,消息:&#39; {&#34;错误&#34; :&#34; invalid_grant&#34; }&#39;&#39;在/home/texterx1/public_html/google-api-php-client-master/src/Google/Auth/OAuth2.php:327堆栈跟踪:#0 / home / texterx1 / public_html / google-api-php-client-master /src/Google/Auth/OAuth2.php(289):Google_Auth_OAuth2-&gt; refreshTokenRequest(数组)#1 /home/texterx1/public_html/google-api-php-client-master/examples/service-account.php(75 )::第327行/home/texterx1/public_html/google-api-php-client-master/src/Google/Auth/OAuth2.php中引用的Google_Auth_OAuth2-&gt; refreshTokenWithAssertion(Object(Google_Auth_AssertionCredentials))#2 {main} < / p>

我做错了什么?

1 个答案:

答案 0 :(得分:1)

好的,您需要做的第一件事就是在开发者控制台上获取与应用程序一起创建的应用程序的电子邮件地址。

1046123799103-nk421gjc2v8mlr2qnmmqaak04ntb1dbp@developer.gserviceaccount.com

登录您的GA,转到您希望服务帐户访问的帐户的管理部分。您需要在帐户级别为该电子邮件帐户提供访问权限,然后向他们提供阅读和分析。


<?php
session_start();
require_once 'Google/Client.php';
require_once 'Google/Service/Analytics.php';
// Values from APIs console for your app    
$client_id = 'Client ID';
$service_account_name = 'Email address';
$key_file_location = 'The file you downloaded';

$client = new Google_Client();
$client->setApplicationName("Client_Library_Examples");
if (isset($_SESSION['service_token'])) {
        $client->setAccessToken($_SESSION['service_token']);
    }
    $key = file_get_contents($key_file_location);

    $cred = new Google_Auth_AssertionCredentials(
        $service_account_name,
        array('https://www.googleapis.com/auth/analytics.readonly'),
        $key
        );
    $client->setAssertionCredentials($cred);
    if($client->getAuth()->isAccessTokenExpired()) {
        $client->getAuth()->refreshTokenWithAssertion($cred);
    }
    $_SESSION['service_token'] = $client->getAccessToken();
    $service = new Google_Service_Analytics($client);  
    $accounts = $service->management_accountSummaries->listManagementAccountSummaries();

   foreach ($accounts->getItems() as $item) {
    echo "Account: ",$item['name'], "  " , $item['id'], "<br /> \n";

    foreach($item->getWebProperties() as $wp) {
    echo '&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;WebProperty: ' ,$wp['name'], "  " , $wp['id'], "<br /> \n";    

    $views = $wp->getProfiles();
    if (!is_null($views)) {
    foreach($wp->getProfiles() as $view) {
        //  echo '&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;View: ' ,$view['name'], "  " , $view['id'], "<br /> \n";    
    }
                }
            }
        }