我正在遵循的示例中给出了以下内容:
/** Authorizes the installed application to access user's protected data. */
private static Credential authorize() throws Exception {
// load client secrets
GoogleClientSecrets clientSecrets = GoogleClientSecrets.load(JSON_FACTORY,
new InputStreamReader(CalendarSample.class.getResourceAsStream("/client_secrets.json")));
// set up authorization code flow
GoogleAuthorizationCodeFlow flow = new GoogleAuthorizationCodeFlow.Builder(
httpTransport, JSON_FACTORY, clientSecrets,
Collections.singleton(CalendarScopes.CALENDAR)).setDataStoreFactory(dataStoreFactory)
.build();
// authorize
return new AuthorizationCodeInstalledApp(flow, new LocalServerReceiver()).authorize("user");
}
为了获取包含凭据的json文件,我需要前往cloud.google.com,并在控制台中找到我的应用程序,点击“Credentials”。接着我点击“Create new ClientId”,选择“Service Account”和“JSON Key”。
这将下载一个“_________.json”文件。
在“public static void main(String ... args) throws Exception {”代码块中,我有以下代码来读取凭据文件:
GoogleClientSecrets clientSecrets = GoogleClientSecrets.load(JSON_FACTORY,
new FileReader("________9f.json"));
执行System.out.println(clientSecrets);
将打印包含private_key_id
、client_email
、client_id
和type
密钥的整个json文件。
接下来,如果我继续使用示例代码:
// set up authorization code flow
GoogleAuthorizationCodeFlow flow = new GoogleAuthorizationCodeFlow.Builder(
httpTransport, JSON_FACTORY, clientSecrets,
Collections.singleton(ComputeScopes.COMPUTE)).setDataStoreFactory(dataStoreFactory).build();
// authorize
new AuthorizationCodeInstalledApp(flow, new LocalServerReceiver()).authorize("user");
这给了我以下的堆栈跟踪:
缺失的变量(目前都是静态变量)如下:主线程中的异常“main”java.lang.IllegalArgumentException at com.google.api.client.repackaged.com.google.common.base.Preconditions.checkArgument(Preconditions.java:76) at com.google.api.client.util.Preconditions.checkArgument(Preconditions.java:37) at com.google.api.client.googleapis.auth.oauth2.GoogleClientSecrets.getDetails(GoogleClientSecrets.java:82) at com.google.api.client.googleapis.auth.oauth2.GoogleAuthorizationCodeFlow$Builder.(GoogleAuthorizationCodeFlow.java:195) at com.mycee.TestGoogle.main(TestGoogle.java:52) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at com.intellij.rt.execution.application.AppMain.main(AppMain.java:140)
JsonFactory JSON_FACTORY = JacksonFactory.getDefaultInstance();
HttpTransport httpTransport = GoogleNetHttpTransport.newTrustedTransport();
FileDataStoreFactory dataStoreFactory = new FileDataStoreFactory(DATA_STORE_DIR);
java.io.File DATA_STORE_DIR = new java.io.File(System.getProperty("user.home"), ".store/compute_engine_sample");
我正在尝试通过Java管理我的Google Compute Engine实例,关于Oath身份验证,您有什么想法我做错了什么吗?
更新:
如请求的那样,pom.xml文件:
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
<modelVersion>4.0.0</modelVersion>
<groupId>com.jvaas</groupId>
<artifactId>jvaas-cloud</artifactId>
<packaging>war</packaging>
<version>1.0.0</version>
<name>jVaaS Cloud</name>
<properties>
<jclouds.version>1.9.0</jclouds.version>
<project.http.version>1.19.0</project.http.version>
<project.oauth.version>1.19.0</project.oauth.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
</properties>
<dependencies>
<dependency>
<groupId>com.google.http-client</groupId>
<artifactId>google-http-client-jackson2</artifactId>
<version>${project.http.version}</version>
</dependency>
<dependency>
<groupId>com.google.oauth-client</groupId>
<artifactId>google-oauth-client-jetty</artifactId>
<version>${project.oauth.version}</version>
</dependency>
<dependency>
<groupId>com.google.apis</groupId>
<artifactId>google-api-services-compute</artifactId>
<version>v1-rev27-1.19.0</version>
</dependency>
</dependencies>
</project>
在默认包中的TestGoogle.java (kots.json
位于src/main/resources
):
import com.google.api.client.extensions.java6.auth.oauth2.AuthorizationCodeInstalledApp;
import com.google.api.client.extensions.jetty.auth.oauth2.LocalServerReceiver;
import com.google.api.client.googleapis.auth.oauth2.GoogleAuthorizationCodeFlow;
import com.google.api.client.googleapis.auth.oauth2.GoogleClientSecrets;
import com.google.api.client.googleapis.javanet.GoogleNetHttpTransport;
import com.google.api.client.http.HttpTransport;
import com.google.api.client.json.JsonFactory;
import com.google.api.client.json.jackson2.JacksonFactory;
import com.google.api.client.util.store.FileDataStoreFactory;
import com.google.api.services.compute.Compute;
import com.google.api.services.compute.ComputeScopes;
import com.google.api.services.compute.model.Instance;
import com.google.api.services.compute.model.InstanceList;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.util.Arrays;
import java.util.List;
public class TestGoogle {
private static final java.io.File DATA_STORE_DIR = new java.io.File(System.getProperty("user.home"), ".store/compute_engine_sample");
private static FileDataStoreFactory dataStoreFactory;
private static HttpTransport httpTransport;
private static final String zoneName = "us-central1-a";
private static final JsonFactory JSON_FACTORY = JacksonFactory.getDefaultInstance();
private static final List<String> SCOPES = Arrays.asList(ComputeScopes.COMPUTE_READONLY);
public static void main(String... args) throws Exception {
httpTransport = GoogleNetHttpTransport.newTrustedTransport();
dataStoreFactory = new FileDataStoreFactory(DATA_STORE_DIR);
InputStream in = TestGoogle.class.getResourceAsStream("/kots.json");
GoogleClientSecrets clientSecrets = GoogleClientSecrets.load(JSON_FACTORY, new InputStreamReader(in));
GoogleAuthorizationCodeFlow flow = // <- fails here
new GoogleAuthorizationCodeFlow.Builder(
httpTransport, JSON_FACTORY, clientSecrets, SCOPES)
.setDataStoreFactory(dataStoreFactory)
.setAccessType("online").setApprovalPrompt("auto")
.build();
new AuthorizationCodeInstalledApp(flow, new LocalServerReceiver()).authorize("user");
}
}
完整的堆栈跟踪:
Exception in thread "main" java.lang.IllegalArgumentException
at com.google.api.client.repackaged.com.google.common.base.Preconditions.checkArgument(Preconditions.java:76)
at com.google.api.client.util.Preconditions.checkArgument(Preconditions.java:37)
at com.google.api.client.googleapis.auth.oauth2.GoogleClientSecrets.getDetails(GoogleClientSecrets.java:82)
at com.google.api.client.googleapis.auth.oauth2.GoogleAuthorizationCodeFlow$Builder.<init>(GoogleAuthorizationCodeFlow.java:195)
at TestGoogle.main(TestGoogle.java:38)
对相关的类文件进行反编译,以下是与代码片段相关的内容:
GoogleAuthorizationCodeFlow.java: 195
public Builder(HttpTransport transport, JsonFactory jsonFactory, GoogleClientSecrets clientSecrets, Collection<String> scopes) {
super(BearerToken.authorizationHeaderAccessMethod(), transport, jsonFactory, new GenericUrl("https://accounts.google.com/o/oauth2/token"), new ClientParametersAuthentication(clientSecrets.getDetails().getClientId(), clientSecrets.getDetails().getClientSecret()), clientSecrets.getDetails().getClientId(), "https://accounts.google.com/o/oauth2/auth");
this.setScopes(scopes);
}
GoogleClientSecrets.java: 82
public GoogleClientSecrets.Details getDetails() {
Preconditions.checkArgument(this.web == null != (this.installed == null));
return this.web == null?this.installed:this.web;
}
Preconditions.java: 37
public static void checkArgument(boolean expression) {
com.google.api.client.repackaged.com.google.common.base.Preconditions.checkArgument(expression);
}
前置条件.java:76
(这是一个代码行号)public static void checkArgument(boolean expression) {
if(!expression) {
throw new IllegalArgumentException();
}
}
将所有敏感数据屏蔽的kots.json:
{
"private_key_id": "________________________________________",
"private_key": "-----BEGIN PRIVATE KEY-----\n__________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________\n-----END PRIVATE KEY-----\n",
"client_email": "_____________________________________________@developer.gserviceaccount.com",
"client_id": "_____________________________________________.apps.googleusercontent.com",
"type": "service_account"
}
当我在cloud.google.com上点击此按钮时,kots.json文件被生成。
更新:看起来我的json文件有误,这个格式修复了它(从与@We are Borg的对话中复制):
{"installed": {
"client_id": "yourid",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://accounts.google.com/o/oauth2/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_email": "",
"client_x509_cert_url": "",
"client_secret": "yoursecret",
"redirect_uris": ["urn:ietf:wg:oauth:2.0:oob", "http://tooltank.de"]
}}
正确的下载位置是创建新的客户端ID并选择已安装的应用程序。