android - 如何在没有后端服务器的 Android 应用中验证 PhotosLibraryClient 的用户

问题描述

以前，我正在使用该库： com.google.apis:google-api-services-photoslibrary:v1-rev1-1.23.0 但我被告知它并不打算发布，并且它有一些错误。所以我尝试切换正确的： com.google.photos.library:google-photos-library-client:1.4.0 但是，这有不同的身份验证流程。

基本上，所有文档和示例都涉及客户端机密的问题，以及提供访问令牌的我的服务器，这是 UserCredentials 所需的，而 UserCredentials 又用于 FixedCredentialsProvider 和 PhotosLibraryClient。

但我没有服务器 - 这是一个独立的应用程序。在开发者控制台上设置客户端 ID 时，当您仅指定应用访问权限时，它不会创建客户端密码（而是使用应用的签名）。鉴于它可以让我创建该 ID - 我认为必须有一种方法可以在没有客户端密码的情况下执行此操作。

对于另一个库，流程是：

使用GoogleSignInClient.getSignInIntent()和startActivityForResult()确定帐户
假设成功，Task<GoogleSignInAccount>使用返回的意图创建一个onActivityResult
从任务中获取GoogleSignInAccount，然后getAccount()从那里获取
为 Google Photos创建一个GoogleAccountCredential.usingOAuth2()传递所需范围，然后setSelectedAccount()
将 `PhotosLibrary.Builder() 与创建的凭据一起使用

但是对于新的，您需要使用UserCredentials，它需要一个客户端密码（以前不需要，并且在生成 Android ID 时没有创建）和一个访问令牌。

看来我应该能够使用获取访问令牌GoogleAuthUtil.getToken，但稍后仍然需要客户端密码。getToken 也不起作用 - 我遇到了身份验证异常。可能是因为我的范围是错误的，但我不确定。

我还研究过使用https://github.com/erickogi/AndroidGooglePhotosApi/blob/master/app/src/main/java/ke/co/calista/googlephotos/Utils/AccessTokenFactory.kt来获取令牌，但是还需要客户端密码。

这是（成功）登录帐户并获取令牌的活动。但我无法弥合这与获得图书馆客户之间的差距。

import android.accounts.Account;
import android.annotation.SuppressLint;
import android.content.Intent;
import android.os.AsyncTask;
import android.os.Bundle;

import androidx.annotation.NonNull;
import androidx.appcompat.app.AppCompatActivity;

import com.google.android.gms.auth.GoogleAuthException;
import com.google.android.gms.auth.GoogleAuthUtil;
import com.google.android.gms.auth.UserRecoverableAuthException;
import com.google.android.gms.auth.api.signin.GoogleSignIn;
import com.google.android.gms.auth.api.signin.GoogleSignInAccount;
import com.google.android.gms.auth.api.signin.GoogleSignInClient;
import com.google.android.gms.auth.api.signin.GoogleSignInOptions;
import com.google.android.gms.common.api.ApiException;
import com.google.android.gms.common.api.Scope;
import com.google.android.gms.tasks.Task;
import com.google.api.gax.core.FixedCredentialsProvider;
import com.google.auth.oauth2.AccessToken;
import com.google.auth.oauth2.UserCredentials;
import com.google.photos.library.v1.PhotosLibraryClient;
import com.google.photos.library.v1.PhotosLibrarySettings;
import com.rjhartsoftware.logcatdebug.D;

import java.io.IOException;

public class MainActivity extends AppCompatActivity {

    public static final String PHOTO_SCOPE = "https://www.googleapis.com/auth/photoslibrary";

    // Request codes
    private static final int RC_SIGN_IN = 9001;

    private GoogleSignInClient mGoogleSignInClient;

    private Account mAccount;
    private String mServerAuthCode;
    private AccessToken mToken;

    @SuppressLint("SetJavaScriptEnabled")
    @Override
    protected void onCreate(Bundle savedInstanceState) {
        D.init(BuildConfig.VERSION_NAME, BuildConfig.DEBUG);
        super.onCreate(savedInstanceState);
        setContentView(R.layout.activity_main);

        GoogleSignInOptions gso = new GoogleSignInOptions.Builder(GoogleSignInOptions.DEFAULT_SIGN_IN)
                .requestScopes(new Scope(PHOTO_SCOPE))
                .requestEmail()
                .build();

        mGoogleSignInClient = GoogleSignIn.getClient(this, gso);
    }

    @Override
    public void onStart() {
        super.onStart();

        // Check if the user is already signed in and all required scopes are granted
        GoogleSignInAccount account = GoogleSignIn.getLastSignedInAccount(this);
        if (GoogleSignIn.hasPermissions(account, new Scope(PHOTO_SCOPE))) {
            mAccount = account.getAccount();
            mServerAuthCode = account.getServerAuthCode();
            new GetToken().execute();
        } else {
            signIn();
        }
    }

    @Override
    public void onActivityResult(int requestCode, int resultCode, Intent data) {
        super.onActivityResult(requestCode, resultCode, data);

        // Result returned from launching the Intent from GoogleSignInApi.getSignInIntent(...);
        if (requestCode == RC_SIGN_IN) {
            Task<GoogleSignInAccount> task = GoogleSignIn.getSignedInAccountFromIntent(data);
            handleSignInResult(task);
        }

    }

    private void signIn() {
        Intent signInIntent = mGoogleSignInClient.getSignInIntent();
        startActivityForResult(signInIntent, RC_SIGN_IN);
    }

    private void handleSignInResult(@NonNull Task<GoogleSignInAccount> completedTask) {
        D.log(D.GENERAL, "handleSignInResult:" + completedTask.isSuccessful()); //NON-NLS

        try {
            GoogleSignInAccount account = completedTask.getResult(ApiException.class);

            if (account != null) {
                // Store the account from the result
                mAccount = account.getAccount();
                mServerAuthCode = account.getServerAuthCode();
                new GetToken().execute();
            }
        } catch (ApiException e) {
            D.warn(D.GENERAL, "handleSignInResult:error", e); //NON-NLS

            // Clear the local account
            mAccount = null;
            mServerAuthCode = null;

        }
    }

    private class GetToken extends AsyncTask<Void, Void, Void> {

        @Override
        protected Void doInBackground(Void... voids) {
            try {
                mToken = null;
                String token = GoogleAuthUtil.getToken(MainActivity.this, mAccount, PHOTO_SCOPE);
                mToken = new AccessToken(token, null);
            } catch (UserRecoverableAuthException e) {
                D.warn(D.GENERAL, "Recoverable Auth Error getting token", e);
            } catch (IOException e) {
                D.error(D.GENERAL, "IO Error getting token", e);
            } catch (GoogleAuthException e) {
                D.warn(D.GENERAL, "Auth Error getting token", e);
            }
            return null;
        }

        @Override
        protected void onPostExecute(Void aVoid) {
            super.onPostExecute(aVoid);
            if (mToken != null) {
                PhotosLibraryClient client = getLibraryClient();
            }
        }
    }

    public PhotosLibraryClient getLibraryClient() {

        // At this point there is an account and server auth code, but we can't get a client yet

        try {
            UserCredentials.Builder credBuilder = UserCredentials.newBuilder()
                    .setClientId("<From Google API Dashboard>")
                    .setClientSecret("<This doesn't exist!")
                    .setAccessToken(mToken);

            UserCredentials creds = credBuilder.build();

            PhotosLibrarySettings.Builder settingsBuilder = PhotosLibrarySettings.newBuilder();
            settingsBuilder.setCredentialsProvider(FixedCredentialsProvider.create(creds));

            PhotosLibrarySettings settings = settingsBuilder.build();

            return PhotosLibraryClient.initialize(settings);
        } catch (IOException e) {
            D.error(D.GENERAL, "Error logging in to Google Photos API", e);
        }
        return null;
    }

}

标签： androidgoogle-photos-apigoogle-auth-library

android - 如何在没有后端服务器的 Android 应用中验证 PhotosLibraryClient 的用户

问题描述

解决方案

推荐阅读