javascript - Oauth2 token response "invalid_grant" with JWT from GoogleAPI -


i have enabled service account google api console perform two-legged oauth making calls google analytics api. using javascript , have followed pure javascript implementation of jwt , jws generate signed jwt , make http/rest call token described in guide. once make post encodedurl 400 "error": "invalid_grant". "error_description": "bad request"

i read posts sure include email , not client_id in request. made sure case , since google has updated documentation.

any ideas? post code if necessary followed rothrock's post @ link.

i tried signed jwt on http://jwt.io/ , says it's invalid signature. payload , header decode correctly. there way test signature after encoding private key provided google api console?

here code:

  var pheader = {"alg":"rs256", "typ":"jwt"};   var sheader = json.stringify(pheader);   var pclaim ={};   pclaim.iss = "(serviceaccount_email_address).apps.googleusercontent.com";   pclaim.scope = "https://www.googleapis.com/auth/analytics.readonly";   pclaim.aud = "htps://www.googleapis.com/oauth2/v3/token";   pclaim.exp = kjur.jws.intdate.get("now + 1hour");   pclaim.iat = kjur.jws.intdate.get("now");    var sclaim = json.stringify(pclaim);    var key = "-----begin private key----- private key json file ----end private key-----";     var sjws = kjur.jws.jws.sign('rs256', sheader, sclaim, key);   var urlencodeddata = '';   var urlencodeddatapairs = [];   var token;   urlencodeddatapairs.push("grant_type" + '=' + "urn:ietf:params:oauth:grant-type:jwt-bearer");   urlencodeddatapairs.push("assertion" + '=' + sjws);   urlencodeddata = urlencodeddatapairs.join('&').replace(/%20/g,'+');   $(function(){     $.ajax({               type: "post",               url: 'https://www.googleapis.com/oauth2/v3/token',               data: urlencodeddata,               datatype: 'json',               contenttype: 'application/x-www-form-urlencoded',               success: function(result){                 console.log(json.stringify(result));               }     });  });

i found answer sometime back, want post here clarification. in code above correct. ssh key provided had \n chars in valid. key had line between -----begin private key----- , starting of actual string of key.


-

Comments

Post a Comment

Popular posts from this blog

OpenCV OpenCL: Convert Mat to Bitmap in JNI Layer for Android -

there several posts converting mat bitmap using utils.mattobitmap() function. i'm assuming function can called in java layer after importing utils class. i want transfer data memory address pointed uint32_t* bmpcontent; in code below. jniexport void jnicall java_com_nod_nodcv_nodcvactivity_runfilter( jnienv *env, jclass clazz, jobject outbmp, jbytearray indata, jint width, jint height, jint choice, jint filter) { int outsz = width*height; int insz = outsz + outsz/2; androidbitmapinfo bmpinfo; if (androidbitmap_getinfo(env, outbmp, &bmpinfo) < 0) { throwjavaexception(env,"gaussianblur","error retrieving bitmap meta data"); return; } if (bmpinfo.format != android_bitmap_format_rgba_8888) { throwjavaexception(env,"gaussianblur","expecting rgba_8888 format"); return; } uint32_t* bmpcontent; if (androidbitmap_lockpixels(env, outbmp,(void**)&bmpcontent)...
Read more

android - org.xmlpull.v1.XmlPullParserException: expected: START_TAG {http://schemas.xmlsoap.org/soap/envelope/}Envelope -

i trying hit soap api in application login purpose , getting above mentioned error , can 1 tell me going wrong , first time soap apis. here code hit soap :- vector<object> args = new vector<object>(); hashtable<string, object> hashtable = new hashtable<string, object>(); hashtable.put("email", "mss.siddhart28@gmail.com"); hashtable.put("password", "siddharth"); args.add(hashtable); soapserializationenvelope envelope = new soapserializationenvelope( soapenvelope.ver11); envelope.dotnet = true; envelope.xsd = soapserializationenvelope.xsd; envelope.enc = soapserializationenvelope.enc; (new marshalhashtable()).register(envelope); httptransportse androidhttptransport = new httptransportse( "http://tempuri.org/", 15000); androidhttptransport.debug = true; string result = ""; try { soapobject request = new soapobject("http:...
Read more

python - How to remove the Xframe Options header in django? -

i have made page has iframe . inside iframe want show multiple different links article facebook, or news, or youtube video or other possible url. but, due xframe header, unable so. referred following link: https://docs.djangoproject.com/en/1.8/ref/clickjacking/ , django xframeoptionsmiddleware (x-frame-options) - allow iframe client ip but didn't help. my settings.py file's middleware_classes is: middleware_classes = ( 'django.contrib.sessions.middleware.sessionmiddleware', 'django.middleware.common.commonmiddleware', 'django.middleware.csrf.csrfviewmiddleware', 'django.contrib.auth.middleware.authenticationmiddleware', 'django.contrib.auth.middleware.sessionauthenticationmiddleware', 'django.contrib.messages.middleware.messagemiddleware', 'django.middleware.clickjacking.xframeoptionsmiddleware', ) from http://django-secure.readthedocs.org/en/latest/middleware.html , found using ...
Read more