java - Postman 和 RestTemplate 的 API 调用中的主体参数相同，但只有 Postman 有效

Question

我的使用 Spotify API 的应用程序直到几天前都可以正常工作，但是，突然它告诉我我正在使用的 body 参数之一是错误的(与之前工作的相同)。我在 Postman 中测试了相同的参数，它工作得很好: Postman call

产生错误的主体参数:grant_type:授权代码

我收到的回复消息:

400 Bad Request
{
    "error": "unsupported_grant_type",
    "error_description": "grant_type must be client_credentials, authorization_code or refresh_token"
}

我放置了一个拦截器来检查我所做的调用是否确实具有正确的参数并且它确实显示正确。

我正在使用的代码:

休息通话

        RestTemplate template = new RestTemplate();
        HttpHeaders headers = new HttpHeaders();
        headers.add("Authorization", CLIENT_ID_SECRET);
        headers.setContentType(MediaType.APPLICATION_FORM_URLENCODED);
        MultiValueMap<String, String> map = new LinkedMultiValueMap<String, String>();
        map.add("grant_type", "authorization_code"); //parameter generating the error
        map.add("code", CODE);
        map.add("redirect_uri", "https://www.getpostman.com/oauth2/callback");
        HttpEntity<MultiValueMap<String, String>> requestEntity=
                new HttpEntity<MultiValueMap<String, String>>(map, headers);

        try{
            AccessToken accessToken = template.postForObject("https://accounts.spotify.com/api/token/", requestEntity,  AccessToken.class);
        }
        catch(RestClientResponseException e) {
            System.out.println(e.getMessage());
            System.out.println("Fail " + e.getResponseBodyAsString());
        }

拦截器结果:

2019-08-29 23:37:44.660  INFO 18784 --- [nio-8080-exec-3] c.e.d.helper.LoggingRequestInterceptor   : URI         : https://accounts.spotify.com/api/token/
2019-08-29 23:37:44.664  INFO 18784 --- [nio-8080-exec-3] c.e.d.helper.LoggingRequestInterceptor   : Method      : POST
2019-08-29 23:37:44.665  INFO 18784 --- [nio-8080-exec-3] c.e.d.helper.LoggingRequestInterceptor   : Headers     : [Accept:"application/json, application/*+json", Content-Type:"application/x-www-form-urlencoded;charset=UTF-8", Authorization:"Basic M2JjZDNmMDVmYTBiNDVkOWE4MTY4ZmFmMjNhYj...DdiMmJjODg=", Content-Length:"433"]
2019-08-29 23:37:44.666  INFO 18784 --- [nio-8080-exec-3] c.e.d.helper.LoggingRequestInterceptor   : Request body: grant_type=authorization_code&code=AQCTD5keYruiGP1ukaZYhDcC0tu9eLnvPnt3IYGlk7mfyaMIPEtdAiTCGbJOfpFA0v9-kgDJJysMAfTnx2e76AHbOZ2C55WVMtYvrR88t6_MDAkbLaPI_0NK7u8AqWhfj1zrkUz-3PBVwoPs6PduuqucSJporVEedpdcNGuQ24HjJdBxjQNEuBwGeTIllBkaWZSx6RzKoZcU-IPw5M44EbCwvHOtZiWL4U5nzER3NPCiZ9_r_w__wmFW1-HunE-32Q1lBzNz9vJVvsl3X_vumBHCNCAWdITzAmiUdU34RHRQAnyimKMPsnPYA-fd1Y_a47e2EXCJclgTHgm6-ODEXmZB&redirect_uri=https%3A%2F%2Fwww.getpostman.com%2Foauth2%2Fcallback

API文档:https://developer.spotify.com/documentation/general/guides/authorization-guide/#authorizaton-code-flow

我不知道要测试什么，非常感谢任何帮助。

编辑:

我发现问题了，我向 https://accounts.spotify.com/api/token/ 提出请求删除最终的/有效 ( https://accounts.spotify.com/api/token )。最有可能的是它被更改为向其他端点发出请求，最后使用/作为 https://api.spotify.com/v1/me/仍然有效...

Answer 1

现在我已登录并在 Spotify 中创建了一个应用程序。请找到以下对我来说效果很好的来源。我在您的源代码中找不到任何错误。

授权

https://accounts.spotify.com/authorize?response_type=code&client_id=_clientId&scope=user-read-private&redirect_uri=http://localhost:11001/api/spotify-response

token

@GetMapping("/spotify-response")
public void spotifyResponse(@RequestParam String code, HttpServletResponse httpServletResponse) {
    String _clientId = "5eb8ce6ea7d04*******e870c48f";
    String _clientSecret = "d45470deea224********3d8ab9";
    RestTemplate restTemplate = new RestTemplate();

    HttpHeaders httpHeaders = new HttpHeaders();
    httpHeaders.setContentType(MediaType.APPLICATION_FORM_URLENCODED);

    String usernamePassword = _clientId+":"+_clientSecret;
    String basicToken = Base64.getEncoder().encodeToString(usernamePassword.getBytes());
    httpHeaders.set("Authorization", "Basic "+basicToken);

    MultiValueMap<String, String> requestBody = new LinkedMultiValueMap<>();
    requestBody.add("grant_type", "authorization_code");
    requestBody.add("code", code.trim());
    requestBody.add("redirect_uri", "http://localhost:11001/api/spotify-response");

    HttpEntity<MultiValueMap<String, String>> httpEntity = new HttpEntity<>(requestBody, httpHeaders);
    try {
        Object response = restTemplate.postForObject("https://accounts.spotify.com/api/token", httpEntity, Object.class);
        Map<String, Object> map = (Map<String, Object>) response;
        map.forEach((k, v) -> System.out.println(k+": "+v));
        httpServletResponse.setStatus(302);
        String accessToken = (String) map.get("access_token");
        String patientId = (String) map.get("patient");
        String url = "http://localhost:4200/login-success?accessToken="+accessToken+"&patientId="+patientId;
        httpServletResponse.setHeader("Location", url); // redirect to success page
    }
    catch(HttpClientErrorException e) {
        e.printStackTrace();
    }
}

控制台输出:

access_token: BQB9z1CeXwnS3MI0uQN-eAK9WRIW4r7U5k0H1RCxnRi5UlF04oYbcYgyoFH3wM-EQUydkKhXjhlJOposaoYSssQpcF9HgPHVCPiwNvzrHS5H8Cc64gcFlstAKxFDTMAfyUqfQ4UTBvdGfmQoORxoEhzsGCAcps-3fnoca_XdzLgjfJdPaQ
token_type: Bearer
expires_in: 3600
refresh_token: AQCKahUnfekyvGZ3RuO6h85YPSmhCqlRTklCw8r4RZzh8BesCu-4mVXKypsuTNV7AwE5tRJt8BXDn1eyXf797LvfVfN4Ju4KUc9AzYFKOiQPblUMip3_ImPOZDsF1InxIzjkAA
scope: user-read-private