Google API Oauth php 永久访问

Question

我正在使用谷歌日历API。这就是我想要的，一旦您授予应用程序权限，我可以随时使用该应用程序，而无需每天授予访问权限。我一直听说我需要保存访问令牌或使用刷新令牌来执行我想做的事情。事情是这样的，你是怎么做到的？代码是什么样的？我尝试将令牌保存在 cookie 中，但一小时后，访问令牌已过期。如何保持用户登录？

PS：请给我一些带有解释的代码示例。

这是我的代码（使用CakePHP）：

$client = new Google_Client();
    $client->setApplicationName("Wanda3.0 Agenda");
    $cal = new Google_CalendarService($client);
    if (isset($_GET['code'])) {
        $client->authenticate($_GET['code']);

        $_SESSION['token'] = $client->getAccessToken();

        header('Location: http://'.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']);
    }
    if (isset($_SESSION['token'])) { $client->setAccessToken($_SESSION['token']); }
if ($client->getAccessToken()) {
        /************* Code entry *************/

    }else{
        /************* Not connected to google calendar code *************/
        $authUrl = $client->createAuthUrl();
        $returnArr = array('status' => 'false', 'message' => "<a class='login' href='$authUrl'>Connect Me!</a>");
        return $returnArr;
    }

Answer 1

好的，在等待了几天之后，特里·塞德勒（Terry Seidler）的建议（下面的评论）使这一切都发生了！这是我关于如何自动刷新访问令牌而无需每次使用 cookie 自动刷新的代码。

（注意：将刷新令牌保存在数据库中更安全）

这就是魔术（使用饼干）：

$client = new Google_Client();
    $client->setApplicationName("Wanda3.0 Agenda");
    $cal = new Google_CalendarService($client);
    $client->setAccessType('offline');
    if (isset($_GET['code'])) {
        $client->authenticate($_GET['code']);
        $_SESSION['token'] = $client->getAccessToken();
        header('Location: http://'.$_SERVER['HTTP_HOST'].$_SERVER['PHP_SELF']);
    }
    //Where the magic happends
    if (isset($_SESSION['token'])) {
        //Set the new access token after authentication
        $client->setAccessToken($_SESSION['token']);
        //json decode the session token and save it in a variable as object
        $sessionToken = json_decode($_SESSION['token']);
        //Save the refresh token (object->refresh_token) into a cookie called 'token' and make last for 1 month
        $this->Cookie->write('token', $sessionToken->refresh_token, false, '1 month');
    }
    //Each time you need the access token, check if there is something saved in the cookie.
    //If $cookie is empty, you are requested to get a new acces and refresh token by authenticating.
    //If $cookie is not empty, you will tell the client to refresh the token for further use,
    // hence get a new acces token with the help of the refresh token without authenticating..
    $cookie = $this->Cookie->read('token');
    if(!empty($cookie)){
        $client->refreshToken($this->Cookie->read('token'));
    }

就是这样！如果您有任何疑问，请随时在下面发表评论，我将尽我所能回答。祝你好运，干杯！

Answer 2

与其使用 cookie 和会话，不如将其保存在数据库中并使用它。

drupal site 的类似实现位于 Google OAuth2 sandbox http://drupal.org/sandbox/sadashiv/1857254 该模块允许您处理来自 drupal 管理界面的身份验证。 然后，您可以使用从 google 获取的访问令牌，然后使用 google_oauth2_account_load 或 google_oauth2_client_get 的 api 函数来获取Google_Client并携带您的 api 调用。

Answer 3

与希望行业非常相似，但经过测试，我只想在必要时刷新令牌。完整源代码只需更改顶部的键等：

require_once 'google-api-php-client/src/Google_Client.php';
require_once 'google-api-php-client/src/contrib/Google_CalendarService.php';
session_start();
$client = new Google_Client();
$client->setApplicationName("Google Calendar PHP Starter Application");
// Visit https://code.google.com/apis/console?api=calendar to generate your
// client id, client secret, and to register your redirect uri.
$client->setClientId('your_id');
$client->setClientSecret('your_secret');
$client->setRedirectUri("http://localhost/your_redirect.php");
$client->setDeveloperKey('your_key');
$cal = new Google_CalendarService($client);
if (isset($_GET['code'])) {
    $client->authenticate($_GET['code']);
    $_SESSION['token'] = $client->getAccessToken();
    header('Location: http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF'] . $query_string);
}
if (isset($_SESSION['token'])) {
    $client->setAccessToken($_SESSION['token']);//update token
    //json decode the session token and save it in a variable as object
    $sessionToken = json_decode($_SESSION['token']);
    //Save the refresh token (object->refresh_token) into a cookie called 'token' and make last for 1 month
    if (isset($sessionToken->refresh_token)) { //refresh token is only set after a proper authorisation
        $number_of_days = 30 ;
        $date_of_expiry = time() + 60 * 60 * 24 * $number_of_days ;
        setcookie('token', $sessionToken->refresh_token, $date_of_expiry);
    }
}
else if (isset($_COOKIE["token"])) {//if we don't have a session we will grab it from the cookie
    $client->refreshToken($_COOKIE["token"]);//update token
}
if ($client->getAccessToken()) {
    $calList = $cal->calendarList->listCalendarList();
    print "<h1>Calendar List</h1><pre>" . print_r($calList, true) . "</pre>";
    $_SESSION['token'] = $client->getAccessToken();
} else {
    $authUrl = $client->createAuthUrl();
    print "<a class='login' href='$authUrl'>Select a calendar!</a>";
}