2014-01-08 59 views
3

我一直在嘗試使用oauth1訪問令牌獲取新的oauth2刷新令牌,但它不斷返回「invalid_token」錯誤。我已檢查並且訪問令牌工作正常。我也在oauth2 playground中測試過相同的creds/params,結果是一樣的。任何幫助表示讚賞...谷歌oauth1到oauth2遷移invalid_token錯誤

這裏是捲曲的詳細輸出:

> POST /o/oauth2/token HTTP/1.1 
Host: accounts.google.com 
Content-Type: application/x-www-form-urlencoded 
Authorization: OAuth oauth_nonce="cb7407355fe20f509cb6bf901eae2d24", oauth_timestamp="1389169471", oauth_consumer_key="***", oauth_token="1%2FFVy....", oauth_signature_method="HMAC-SHA1", oauth_signature="0YL1hH5R571nOH1byeHxQlg%2Fa6g%3D" 
Content-Length: 444 

* upload completely sent off: 444 out of 444 bytes 
< HTTP/1.1 400 Bad Request 
< Cache-Control: no-cache, no-store, max-age=0, must-revalidate 
< Pragma: no-cache 
< Expires: Fri, 01 Jan 1990 00:00:00 GMT 
< Date: Wed, 08 Jan 2014 08:24:31 GMT 
< Content-Type: application/json 
< X-Content-Type-Options: nosniff 
< X-Frame-Options: SAMEORIGIN 
< X-XSS-Protection: 1; mode=block 
* Server GSE is not blacklisted 
< Server: GSE 
< Alternate-Protocol: 443:quic 
< Transfer-Encoding: chunked 
< 
* Connection #0 to host accounts.google.com left intact 
string(415) "HTTP/1.1 400 Bad Request 
Cache-Control: no-cache, no-store, max-age=0, must-revalidate 
Pragma: no-cache 
Expires: Fri, 01 Jan 1990 00:00:00 GMT 
Date: Wed, 08 Jan 2014 08:24:31 GMT 
Content-Type: application/json 
X-Content-Type-Options: nosniff 
X-Frame-Options: SAMEORIGIN 
X-XSS-Protection: 1; mode=block 
Server: GSE 
Alternate-Protocol: 443:quic 
Transfer-Encoding: chunked 

{ 
    "error" : "invalid_token" 
}" 
+0

感謝您報告問題。我正在研究這個,會盡快更新這個線程。 –

回答

0

我們已經做出了OAuth1->的OAuth2令牌遷移的確認件數的變化。你會介意再次檢查你的遷移流程並更新這個線程的結果嗎?

1

你可以檢查你是否將client_secret放置在POST Body中的{}中?

grant_type =甕:IETF:PARAMS:OAuth的:授型:遷移:您好!OAuth1 &的client_id = xxxxxxx.apps.googleusercontent.com & client_secret = {XXXXXXX}

你也需要把{ }在生成oauth_signature時圍繞client_secret值