angular - Google SignIn 在 Web App 中获取访问 token

Question

在我的网络应用程序(FE:Angular，BE:Flask)中，我要求用户使用 Google 登录并将刷新 token 保存在我的数据库中。

通过谷歌文档后，我了解到刷新 token 只能在服务器端应用程序中获取。但是，文档中指定的代码似乎不起作用。引用:https://developers.google.com/identity/sign-in/web/server-side-flow

我在第 7 步中遇到错误，https://developers.google.com/identity/sign-in/web/server-side-flow#step_7_exchange_the_authorization_code_for_an_access_token

from apiclient import discovery
import httplib2
from oauth2client import client

# (Receive auth_code by HTTPS POST)


# If this request does not have `X-Requested-With` header, this could be a CSRF
if not request.headers.get('X-Requested-With'):
    abort(403)

# Set path to the Web application client_secret_*.json file you downloaded from the
# Google API Console: https://console.developers.google.com/apis/credentials
CLIENT_SECRET_FILE = '/path/to/client_secret.json'

# Exchange auth code for access token, refresh token, and ID token
credentials = client.credentials_from_clientsecrets_and_code(
    CLIENT_SECRET_FILE,
    ['https://www.googleapis.com/auth/drive.appdata', 'profile', 'email'],
    auth_code)

# Call Google API
http_auth = credentials.authorize(httplib2.Http())
drive_service = discovery.build('drive', 'v3', http=http_auth)
appfolder = drive_service.files().get(fileId='appfolder').execute()

# Get profile info from ID token
userid = credentials.id_token['sub']
email = credentials.id_token['email']

Answer 1

我找到了一个解决方案，对以下响应稍作修改，https://stackoverflow.com/a/50616780/11997783

更改登录功能

this.auth2.signIn().then(user => {})

到

signIn(): void {
this.auth2.grantOfflineAccess().then((resp) => {});

使用 grantOfflineAccess() 我们将能够获得授权码。

POST the Authorization code to https://oauth2.googleapis.com/token with parameters 
code: <authorization-code> ,
client_id: <project-client-id>, 
client_secret: <project-client-secret>, 
redirect_uri: <should be uri of the FE>, 
grant_type: authorization_code

附加引用:https://developers.google.com/identity/sign-in/web/reference#gapiauth2clientconfig