Question

每当我们尝试访问API以获取当前用户号时，我们都会一直收到错误消息。我已经尝试了一些东西，但无法深究这一点。任何人都可以了解错误/遗漏的错误吗？

我应该指出，因此在我的本地PC上运行完全正常，但在服务器上失败了。

这是错误：

ConnectToAnalytics错误： System.Security.Cryptography.CryptographicException：无效的提供程序指定的类型。在 System.Security.Cryptography.Utils.CreateProvHandle（CspParameters 参数，布尔值randomKeyContainer）at System.Security.Cryptography.Utils.GetKeyPairHelper（CspAlgorithmType keyType，CspParameters参数，Boolean randomKeyContainer，Int32 dwKeySize，SafeProvHandle＆amp; safeProvHandle，SafeKeyHandle＆amp; safeKeyHandle）at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair（）at System.Security.Cryptography.RSACryptoServiceProvider..ctor（的Int32 dwKeySize，CspParameters参数，布尔值useDefaultKeySize）at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey（）在 Google.Apis.Auth.OAuth2.ServiceAccountCredential.Initializer.FromCertificate（X509Certificate2 证书） C：\ Users \用户mdril \文件\ GitHub的\ Google处理API-DOTNET客户端\ SRC \ GoogleApis.Auth.DotNet4 \的OAuth2 \ ServiceAccountCredential.cs：线 100在Core.ConnectToAnalytics（）

运行代码时抛出此错误：

Public Shared Function GetRealtimeUsers() As String
    Try
        'realtime on site
        Dim gsService As AnalyticsService = Core.ConnectToAnalytics
        Dim RequestRealtime As DataResource.RealtimeResource.GetRequest = gsService.Data.Realtime.[Get]([String].Format("ga:{0}", "xxxxx"), "rt:activeUsers")
        Dim feed As RealtimeData = RequestRealtime.Execute()

        Return Int(feed.Rows(0)(0)).ToString()
    Catch ex As Exception
        Return "QUOTA USED"
    End Try

错误在这里：RequestRealtime.Execute（）

供参考 - 这是连接脚本：

Public Shared Function ConnectToAnalytics() As AnalyticsService
    Try
        Dim scopes As String() = New String() {AnalyticsService.Scope.Analytics, AnalyticsService.Scope.AnalyticsEdit, AnalyticsService.Scope.AnalyticsManageUsers, AnalyticsService.Scope.AnalyticsReadonly}
        Dim keyFilePath = HttpContext.Current.Server.MapPath("\xxx.p12")
        Dim serviceAccountEmail = "xxx"
        Dim certificate = New X509Certificate2(keyFilePath, "xxxx", X509KeyStorageFlags.Exportable)
        Dim credential = New ServiceAccountCredential(New ServiceAccountCredential.Initializer(serviceAccountEmail) With {.Scopes = scopes}.FromCertificate(certificate))
        Return New AnalyticsService(New BaseClientService.Initializer() With {.HttpClientInitializer = credential, .ApplicationName = "Client for xxx"})
    Catch ex As Exception
        Core.SendAdminStatusReport("ConnectToAnalytics error: " & ex.ToString)
        Throw ex
    End Try
End Function

Answer 1

如果没有看到您的代码，很难知道您的问题是什么，但这里是我的服务帐户authncation代码

   /// <summary>
    /// Authenticating to Google using a Service account
    /// Documentation: https://developers.google.com/accounts/docs/OAuth2#serviceaccount
    /// </summary>
    /// <param name="serviceAccountEmail">From Google Developer console https://console.developers.google.com</param>
    /// <param name="serviceAccountCredentialFilePath">Location of the .p12 or Json Service account key file downloaded from Google Developer console https://console.developers.google.com</param>
    /// <returns>AnalyticsService used to make requests against the Analytics API</returns>
    public static AnalyticsreportingService AuthenticateServiceAccount(string serviceAccountEmail, string serviceAccountCredentialFilePath, string[] scopes)
    {
        try
        {
            if (string.IsNullOrEmpty(serviceAccountCredentialFilePath))
                throw new Exception("Path to the service account credentials file is required.");
            if (!File.Exists(serviceAccountCredentialFilePath))
                throw new Exception("The service account credentials file does not exist at: " + serviceAccountCredentialFilePath);
            if (string.IsNullOrEmpty(serviceAccountEmail))
                throw new Exception("ServiceAccountEmail is required.");                

            // For Json file
            if (Path.GetExtension(serviceAccountCredentialFilePath).ToLower() == ".json")
            {
                GoogleCredential credential;
                using (var stream = new FileStream(serviceAccountCredentialFilePath, FileMode.Open, FileAccess.Read))
                {
                    credential = GoogleCredential.FromStream(stream)
                         .CreateScoped(scopes);
                }

                // Create the  Analytics service.
                return new AnalyticsreportingService(new BaseClientService.Initializer()
                {
                    HttpClientInitializer = credential,
                    ApplicationName = "Analyticsreporting Service account Authentication Sample",
                });
            }
            else if (Path.GetExtension(serviceAccountCredentialFilePath).ToLower() == ".p12")
            {   // If its a P12 file

                var certificate = new X509Certificate2(serviceAccountCredentialFilePath, "notasecret", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable);
                var credential = new ServiceAccountCredential(new ServiceAccountCredential.Initializer(serviceAccountEmail)
                {
                    Scopes = scopes
                }.FromCertificate(certificate));

                // Create the  Analyticsreporting service.
                return new AnalyticsreportingService(new BaseClientService.Initializer()
                {
                    HttpClientInitializer = credential,
                    ApplicationName = "Analyticsreporting Authentication Sample",
                });
            }
            else
            {
                throw new Exception("Unsupported Service accounts credentials.");
            }

        }
        catch (Exception ex)
        {                
            throw new Exception("CreateServiceAccountAnalyticsreportingFailed", ex);
        }
    }
}

代码摘自ServiceAccount.cs

Answer 2

我设法解决了这个问题 - 我在根证书上排在正确的位置，原来我错过了一个。这些可以在这里找到：

https://pki.goog/

我不记得我在哪里找到了这个，但是将下面的代码添加到webconfig帮助我找出了我丢失的证书：

 <system.diagnostics>
<trace autoflush="true" />
<sources>
  <source name="System.Net">
    <listeners>
      <add name="System.Net"/>
    </listeners>
  </source>
  <source name="System.Net.HttpListener">
    <listeners>
      <add name="System.Net"/>
    </listeners>
  </source>
  <source name="System.Net.Sockets">
    <listeners>
      <add name="System.Net"/>
    </listeners>
  </source>
  <source name="System.Net.Cache">
    <listeners>
      <add name="System.Net"/>
    </listeners>
  </source>
</sources>
<sharedListeners>
  <add
   name="System.Net"
   type="System.Diagnostics.TextWriterTraceListener"
    initializeData="System.Net.trace.log"
   traceOutputOptions = "ProcessId, DateTime"
            />
</sharedListeners>
<switches>
  <add name="System.Net" value="Verbose" />
  <add name="System.Net.Sockets" value="Verbose" />
  <add name="System.Net.Cache" value="Verbose" />
  <add name="System.Net.HttpListener" value="Verbose" />
</switches>

Answer 3

我在这篇文章中找到了解决方法：

https://www.daimto.com/azure-with-service-accounts-in-c/

更改此行

var certificate = new X509Certificate2(keyFilePath, "notasecret", X509KeyStorageFlags.Exportable);

到

var certificate = new X509Certificate2(keyFilePath, "notasecret", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable);

解决了我的问题

尝试访问Google Analytics时指定的提供程序类型无效

3 个答案: