处理过期的身份验证令牌android客户经理

Question

每当我需要使用来自AccountManager的Google身份验证令牌发出请求时，我是否应该无效并请求新令牌，或者我是否有“过期时间”时间戳，以查看它是否仍然有效。

Answer 1

There is no expiry time provided in the HTTP response from the Google service, so I think you need to ensure that if the auth-token fails to provide access, you use that as the trigger to get a new auth token. Or you could acquire a new token each time the application starts, or create your own timeout.

http://code.google.com/apis/accounts/docs/AuthForInstalledApps.html

Answer 2

Looking at the HTTP response, the status code is 302 (it's redirecting you to provide auth token) and the "Set-Cookie" field in the header is not present . You could key off that.

if (res.getStatusLine().getStatusCode() == 302 && res.getHeaders("Set-Cookie").length == 0) {
    // we need a new token
    // invalidate account manager logic here
}

Failing to get that cookie from Google seems to signify it's time to grab a new token from AccountManager.

Answer 3

As there is no accepted answer yet: I do it by firing my requests in a try block, then catching any exceptions and check if it's a 401 with if (e.getMessage().equals("401 Unauthorized")) { ... } . Then, invalidate the auth token, request a new one and retry the request.

Answer 4

You need to call invalidateAuthToken(String, String) when you know the token has expired. ie when the request fails with an authentication error.