Question

我正在尝试使用docs（v6）/ Laravel 5.2跟随Guzzle获取Sage One API的访问令牌（Laravel的参与与此问题无关），它被困在“请求访问令牌”阶段。

错误

Client error: `POST https://api.sageone.com/oauth2/token` resulted in a
 `400 Bad Request` response: {"error":"unsupported_grant_type"}

违规代码

    $client = new Client([
        'base_uri'=>'https://api.sageone.com',
        'headers' => ['content_type' => 'application/x-www-form-urlencoded']
    ]);
    $data = [
        'client_id' => getenv('SAGE_CLIENT'),
        'client_secret' => getenv('SAGE_SECRET'),
        'code' => $request->code,
        'grant_type' => 'authorization_code',
        'redirect_uri'=>'https://myurl.com/sage/refresh'
    ];

    $response = $client->request('POST','/oauth2/token',['json' => $data]);

文档状态 “grant_type - 代码所涉及的授权类型。使用authorization_code或refresh_token。” ，我已尝试过两者。其他变量都很好，花花公子，只是grant_type似乎失败了。

更新1 调试头生成下面的输出。

* Hostname in DNS cache was stale, zapped * Trying 52.49.116.133... 
* Connected to api.sageone.com (52.49.116.133) port 443 (#0) 
* CAfile: /etc/pki/tls/certs/ca-bundle.crt CApath: none 
* ALPN/NPN, server did not agree to a protocol 
* SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 
* Server certificate: 
* subject: CN=api.sageone.com,O=The Sage Group PLC,L=Newcastle Upon Tyne,ST=Newcastle Upon Tyne,C=GB,serialNumber=02231246,businessCategory=Private Organization,incorporationCountry=GB 
* start date: May 12 00:00:00 2014 GMT 
* expire date: May 11 23:59:59 2016 GMT 
* common name: api.sageone.com 
* issuer: CN=GeoTrust Extended Validation SSL CA - G2,O=GeoTrust Inc.,C=US > POST /oauth2/token HTTP/1.1 Host: api.sageone.com content_type: application/x-www-form-urlencoded User-Agent: GuzzleHttp/6.1.1 curl/7.43.0 PHP/5.6.18 Content-Type: application/x-www-form-urlencoded Content-Length: 216 
* upload completely sent off: 216 out of 216 bytes < HTTP/1.1 400 Bad Request < Content-Type: application/json < Date: Tue, 08 Mar 2016 10:53:09 GMT < Server: openresty < Content-Length: 26 < Connection: keep-alive < 
* Connection #0 to host api.sageone.com left intact

Answer 1

您正在将值作为JSON编码数据发布，但您应该使用表单编码进行POST。请参阅：http://docs.guzzlephp.org/en/latest/request-options.html#form-params，所以

$response = $client->request('POST','/oauth2/token',['form_params' => $data]);

修改

您应该再次检查您的代码，因为我刚刚验证并仔细检查了此更改是否适用于实时sage环境。我使用的完整代码：

<?php require 'vendor/autoload.php'; $client = new GuzzleHttp\Client([ 'base_uri'=>'https://api.sageone.com', 'headers' => ['content_type' => 'application/x-www-form-urlencoded'] ]); $data = [ 'client_id' => getenv('SAGE_CLIENT'), 'client_secret' => getenv('SAGE_SECRET'), 'code' => getenv('SAGE_CODE'), 'grant_type' => 'authorization_code', 'redirect_uri'=>'https://myurl.com/sage/refresh' ]; $response = $client->request('POST','/oauth2/token',['form_params' => $data]); echo $response->getBody(); ?>

Answer 2

将json用于oAuth确实不正确：http://tools.ietf.org/html/rfc6749#section-4.1.3 我想，这是不正确的：

$response = $client->request('POST','/oauth2/token',['json' => json_encode($data)]);

相反，我会尝试这样的事情：

$response = $client->post('/oauth2/token', [], $data);

或者这个

$response = $client->post('/oauth2/token', ['body' => $data]);

另一个问题，第一个电话https://www.sageone.com/oauth2/auth怎么办？它是通过了吗？

Sage One API - unsupported_grant_type

2 个答案: