go - oauth2 无法获取令牌：错误的请求

Question

我编写了一个回调处理程序来使用 Google 帐户登录：

func GoogleCallbackHandler(w http.ResponseWriter, r *http.Request) {

    conf:=&oauth2.Config{

        ClientID:"700740834863-m4om9r91htn19htq2b6a05fu6vu4j7i5.apps.googleusercontent.com",

        ClientSecret:"...-rB",

        RedirectURL:"http://localhost:3000/auth/google/callback",

        Scopes:[]string{"profile"},

        Endpoint:google.Endpoint,

    }

    fmt.Println(conf.AuthCodeURL("state"))

    code := r.URL.Query().Get("code")

    token, err := conf.Exchange(oauth2.NoContext, code)

    if err != nil {

        http.Error(w, err.Error(), http.StatusInternalServerError)

        return

    }

    client := conf.Client(oauth2.NoContext, token)

    resp, err := client.Get("https://www.googleapis.com/userinfo/v2/me")

    if err != nil {

        http.Error(w, err.Error(), http.StatusInternalServerError)

        return

    }

    raw, err := ioutil.ReadAll(resp.Body)

    defer resp.Body.Close()

    if err != nil {

        http.Error(w, err.Error(), http.StatusInternalServerError)

        return

    }

    var profile map[string]interface{}

    if err := json.Unmarshal(raw, &profile); err != nil {

        http.Error(w, err.Error(), http.StatusInternalServerError)

        return

    }

    session, _ := util.GlobalSessions.SessionStart(w, r)

    defer session.SessionRelease(w)

    session.Set("id_token", token.Extra("id_token"))

    session.Set("access_token", token.AccessToken)

    session.Set("profile", profile)

    // // Redirect to logged in page

    http.Redirect(w, r, "/user", http.StatusMovedPermanently)

}

在main，我为处理程序提供服务

http.HandleFunc("/",route.IndexHandler)

http.HandleFunc("/auth/google/",route.GoogleCallbackHandler)

http.Handle("/user",negroni.New(

    negroni.HandlerFunc(route.IsAuthenticated),

    negroni.Wrap(http.HandlerFunc(route.UserHandler)),

))

上次问这个问题后，我设法用上面的代码修复它，成功访问和获取数据，但昨晚它突然再次出现此错误，我不明白为什么它在最近几天工作后不再起作用使用完全相同的代码

我怎样才能得到codefrom AuthCodeURL？有没有办法在不重定向到任何其他处理程序的情况下获取用于交换的代码？我想在一个这个处理程序中处理所有事情

Answer 1

我可以通过添加一个处理程序来解决它var (    conf *oauth2.Config)func GoogleCallbackHandler(w http.ResponseWriter, r *http.Request) {    conf=&oauth2.Config{        ClientID:"700740834863-m4om9r91htn19htq2b6a05fu6vu4j7i5.apps.googleusercontent.com",        ClientSecret:"...-rB",        RedirectURL:"http://localhost:3000/auth/google/callback",        Scopes:[]string{"profile"},        Endpoint:google.Endpoint,    }    http.Redirect(w, r, conf.AuthCodeURL("state"), http.StatusMovedPermanently)}func GoogleLoginHandler(w http.ResponseWriter, r *http.Request) {    code := r.URL.Query().Get("code")    token, err := conf.Exchange(oauth2.NoContext, code)    if err != nil {        http.Error(w, err.Error(), http.StatusInternalServerError)        return    }    client := conf.Client(oauth2.NoContext, token)    resp, err := client.Get("https://www.googleapis.com/userinfo/v2/me")    if err != nil {        http.Error(w, err.Error(), http.StatusInternalServerError)        return    }    raw, err := ioutil.ReadAll(resp.Body)    defer resp.Body.Close()    if err != nil {        http.Error(w, err.Error(), http.StatusInternalServerError)        return    }    var profile map[string]interface{}    if err := json.Unmarshal(raw, &profile); err != nil {        http.Error(w, err.Error(), http.StatusInternalServerError)        return    }    session, _ := util.GlobalSessions.SessionStart(w, r)    defer session.SessionRelease(w)    session.Set("id_token", token.Extra("id_token"))    session.Set("access_token", token.AccessToken)    session.Set("profile", profile)    http.Redirect(w, r, "/user", http.StatusMovedPermanently)}