python - OAUTH2 - Fitbit 使用 requests_oauthlib

Question

上下文

I am writing a python/django application which accesses Fitbit data.

问题

To access a users data I must get their token for which can be used repeatably to access fitness data. The following goes through the current steps.

<小时/>

<强>1。首先，我向用户提供一个链接:

def register_2(request):
    if request.user.is_authenticated():

        oauth = OAuth2Session(
                auth_2_client_id,
                redirect_uri    = redirect_uri,
                scope           = fitbit_scope)

        authorization_url, state = oauth.authorization_url(fitbit_url_authorise_2)

        return render_to_response('register.html',{
                "authorization_url" : authorization_url
            },context_instance=RequestContext(request))
    return HttpResponseRedirect("/")

<小时/>

<强>2。用户访问 Fitbit，登录其帐户并授权访问。

<小时/>

<强>3。然后，用户将返回到我的网站，并带有一个代码，该代码应该允许我获取 token 。

def callback_2(request):
    if request.user.is_authenticated():
        code = request.GET.get('code')
        state = request.GET.get('state')

        oauth = OAuth2Session(
                client_id               = auth_2_client_id,
                redirect_uri            = redirect_uri
                )

        token = oauth.fetch_token(
                code                    = code,
                token_url               = fitbit_url_access_2,
                authorization_response  = request.build_absolute_uri()
                )

一旦调用callback_2，我就会收到错误:

(missing_token) Missing access token parameter.

资源:

Fitbit OAUTH2 API

OAuth2Session Docs

Answer 1

Found a way around this. Pretty simple after all the effort of research. The following is a custom method using requests.post() and base64.b64encode().

def callback_2(request):
    if request.user.is_authenticated():
        code    = request.GET.get('code')
        state   = request.GET.get('state')

        url     = fitbit_url_access_2
        data    = "client_id="      + auth_2_client_id      + "&" +\
                  "grant_type="     + "authorization_code"  + "&" +\
                  "redirect_uri="   + redirect_uri_special  + "&" +\
                  "code="           + code

        headers     = {
            'Authorization': 'Basic ' + base64.b64encode(auth_2_client_id + ':' + consumer_secret),
            'Content-Type': 'application/x-www-form-urlencoded'}

        r = requests.post(url, data=data, headers=headers).json()