Ember oauth2身份验证问题

Question

尝试将ember应用程序连接到oauth2身份验证服务时，获得一个[error=“unauthorized”，error_description=“访问此资源需要完全身份验证”]。如有任何建议，我们将不胜感激。我花了几天时间想解决这个问题，但没有效果。

下面是app.js中的代码

         Ember.Application.initializer({
      name: 'authentication',
      initialize: function(container, application) {
         Ember.SimpleAuth.Authenticators.OAuth2.reopen({
                     makeRequest: function(credentials) {
                         credentials.client_id= 'rsweb-client';
                         credentials.client_secret= '123456';
                         credentials.scope='read';

                  return Ember.$.ajax({
                          type: "POST",
                          url: 'http://127.0.0.1:8080/api/oauth/token',
                          async: false,
                          data:credentials,

                          success: function (data, textStatus, xhr){
                              Ember.run(function(){
                                  resolve({username: data['pl-usr-nickname']});
                              });
                          },
                          error: function (xhr, status, error){
                              Ember.run(function(){
                                  console.log(xhr.responseText);
                              });
                         }
                      });
                    }
                 });

          Ember.SimpleAuth.setup(container, application, { // @todo at version 0.1.2 of Ember-simple-auth, add container
              crossOriginWhitelist: ['http://127.0.0.1:8080'], // @todo remove when live
              // store: Ember.SimpleAuth.Stores.LocalStorage,
              authenticationRoute: 'login'
          });
      }
      }); 
Here is the # The OAuth-secured REST Endpoint
This uses the simple OAuth Resource Owner Password flow.
Here is an example of how to acquired an access_token, and then use that access_token to update an application.
```
curl --noproxy localhost -X POST -vu rsweb-client:123456 http://127.0.0.1:8080/api/oauth/token -H "Accept: application/json" -d "password=password&username=user&grant_type=password&scope=read&client_secret=123456&client_id=rsweb-client"
当我从命令行工具访问时，这将返回一个令牌。但不是从烬应用程序。
以下是请求有效负载：
                




Answer 1

看起来您的身份验证服务器需要client_id和client_secret作为HTTP基本身份验证凭据，而您的身份验证器在有效负载中发送它们。您必须在makerequest方法中添加authorization头，如以下所定义的：http://tools.ietf.org/html/rfc2617，它将是“rseb-client:123456”的base64编码。