[英]Ember oauth2 Authentication issues
尝试将ember应用程序连接到oauth2身份验证服务时,获取[error =“ unauthorized”,error_description =“需要完全身份验证才能访问此资源”]。 任何建议将不胜感激。 我花了几天的时间试图解决此问题,但无济于事。
这是app.js中的代码
Ember.Application.initializer({
name: 'authentication',
initialize: function(container, application) {
Ember.SimpleAuth.Authenticators.OAuth2.reopen({
makeRequest: function(credentials) {
credentials.client_id= 'rsweb-client';
credentials.client_secret= '123456';
credentials.scope='read';
return Ember.$.ajax({
type: "POST",
url: 'http://127.0.0.1
:8080/api/oauth/token',
async: false,
data:credentials,
success: function (data, textStatus, xhr){
Ember.run(function(){
resolve({username: data['pl-usr-nickname']});
});
},
error: function (xhr, status, error){
Ember.run(function(){
console.log(xhr.responseText);
});
}
});
}
});
Ember.SimpleAuth.setup(container, application, { // @todo at version 0.1.2 of Ember-simple-auth, add container
crossOriginWhitelist: ['http://127.0.0.1
:8080'], // @todo remove when live
// store: Ember.SimpleAuth.Stores.LocalStorage,
authenticationRoute: 'login'
});
}
});
Here is the # The OAuth-secured REST Endpoint
This uses the simple OAuth Resource Owner Password flow.
Here is an example of how to acquired an access_token
, and then use that access_token
to update an application.
```
curl --noproxy localhost -X POST -vu rsweb-client:123456 http://127.0.0.1
:8080/api/oauth/token -H "Accept: application/json" -d "password=password&username=user&grant_type=password&scope=read&client_secret=123456&client_id=rsweb-client"
This returns an token when i access from the command line tool. But not from the ember app.
Here is the request payload:
Content-Type application/x-www-form-urlencoded; charset=UTF-8
Accept */*
Parameters application/x-www-form-urlencoded
client_id rsweb-client
client_secret 123456
grant_type password
password password
scope read
username user
看起来您的身份验证服务器希望将client_id和client_secret作为HTTP基本身份验证凭据,而您的身份验证器会在有效负载中发送它们。 您必须在如以下定义的makeRequest
方法中添加Authorization
标头,例如: http ://tools.ietf.org/html/rfc2617,它是“ rsweb-client:123456”的base64编码。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.