带有刷新令牌的Google Oauth2服务器端流java

Question

我试图通过运行在VM中的java应用程序从GoogleAnalytics中获取一些数据。

我有一个refresh令牌，我想使用这个refresh令牌生成auth令牌，并最终从GA获得数据。

这就是我当前代码的样子。

private static String getAccessToken(String refreshToken) throws IOException {
        TokenResponse tokenResponse = new GoogleRefreshTokenRequest(httpTransport, JSON_FACTORY, refreshToken, googleClientId, googleClientSecret)
                .setScopes(AnalyticsScopes.all())
                .setGrantType("refresh_token")
                .execute();
        return tokenResponse.getAccessToken();
    }

public Credential getCredentials() throws GeneralSecurityException, IOException, FileNotFoundException {
        final NetHttpTransport HTTP_TRANSPORT = GoogleNetHttpTransport.newTrustedTransport();

        // Load client secrets.
        InputStream in = GoogleAnalyticsDataImportService.class.getResourceAsStream(CLIENT_SECRET_JSON_RESOURCE);
        if (in == null) {
            throw new FileNotFoundException("Resource not found: " + CLIENT_SECRET_JSON_RESOURCE);
        }
        GoogleClientSecrets clientSecrets = GoogleClientSecrets.load(JSON_FACTORY, new InputStreamReader(in));

        String clientId = clientSecrets.getDetails().getClientId();
        String clientSecret = clientSecrets.getDetails().getClientSecret();

        Credential credential = new GoogleCredential.Builder()
                .setTransport(HTTP_TRANSPORT)
                .setJsonFactory(JSON_FACTORY)
                .setClientSecrets(clientId, clientSecret)
                .build();

        String refreshToken = "<REFRESH-TOKEN>"; //Find a secure way to store and load refresh token
        credential.setAccessToken(getAccessToken(refreshToken));
        credential.setRefreshToken(refreshToken);

        return credential;
    }

这里的问题是，GoogleCredentials是不推荐的，我无法在没有使用refreshToken的情况下创建Credentials类。

我还尝试了另一个流，但它打开浏览器以获得用户身份验证，但我不希望那样。前端将处理用户身份验证，我计划将刷新令牌安全地存储在数据库中，以便将来访问API。

如何使用刷新令牌并创建凭据类以便访问Google Analytics数据？

Answer 1

基于GoogleCredential类Java Doc，您可以查看

https://github.com/googleapis/google-auth-library-java

我很快就看了看。应该可以通过GoogleCredentials而不是不推荐的GoogleCredential获得令牌

GoogleCredentials credentials = GoogleCredentials.fromStream(new 
FileInputStream("/path/to/credentials.json"));
credentials.refreshIfExpired();
AccessToken token = credentials.getAccessToken();
// OR
AccessToken token = credentials.refreshAccessToken();