Google返回INVALID_CREDENTIALS

Question

目前，我正在尝试使用Google身份工具包实现忘记密码功能。PHP后端试图获取oob代码，因为客户端(iOS)没有足够的权限。

每当我运行这个脚本时，我都会得到一个INVALID_CREDENTIALS错误，更具体地说：

oob Code: string(249) "{ "error": { "errors": [ { "domain": "global", "reason": "authError", "message": "Invalid Credentials", "locationType": "header", "location": "Authorization" } ], "code": 401, "message": "Invalid Credentials" } } "

我不知道从哪里获得authToken，或者这是否正确地发送了post请求。

$authToken = "xxxxxxxxxxxxxxxxx";
$email = $_POST['email'];
$uIp = $_POST['ip']; 
//Post Data in Array
$postData = array(
    'kind' => 'identitytoolkit#relyingparty',
    'requestType' => 'PASSWORD_RESET',
    'email' => '$email',
    'challenge' => 'verified',
    'captchaResp' => 'verified',
    'userIp' => '$uIp',
    'newEmail' => 'null',
    'idToken' => 'null'
    );

//Setup cURL
$ch = curl_init('https://www.googleapis.com/identitytoolkit/v3/relyingparty/getOobConfirmationCode?key=xxxxxxxxxxxxxxxxxxxx');
curl_setopt_array($ch, array(
    CURLOPT_POST => TRUE,
    CURLOPT_RETURNTRANSFER => TRUE,
    CURLOPT_HTTPHEADER => array(
        'Authorization: '.$authToken,
        'Content-Type: application/json'
    ),
    CURLOPT_POSTFIELDS => json_encode($postData)
));
//Send Request
$response = curl_exec($ch);

Answer 1

Google客户端上的这份文件向您展示了如何为您的应用程序获取OAuth令牌。

但是，您可能会发现使用身份工具包特定的PHP客户端更容易。要生成忘记密码链接，只需在初始化的getOobResults()方法上调用GitkitClient。