通过Google Apps脚本通过POST到Todoist API的HTTP错误“ AUTH_CSFR_ERROR”

Question

我正在尝试从Google Apps脚本中查询Todoist API中的项目，模仿了curl POST。

我最初试图使OAuth2正常工作，但是令牌不是持久性的，而是选择了API的使用各个API令牌交换有效令牌的方法。

使用App Script的UrlFetchApp类 ，我试图在POST请求中构造Todoist的API来检索任务项，而我的getTodoistToken()函数确实正在检索有效的令牌响应，但是POST命令发出以下403：

“ error_tag”：“ AUTH_CSRF_ERROR”，“ error_code”：0：“ http_code”：403，“ error_extra”：{“ access_type”：“ web_session”}，“ error”：“ AUTH_CSRF_ERROR”}

谁能推荐解决方案？ 非常感谢，下面的代码：

function getTodoistToken() {
  var url = "https://todoist.com/api/access_tokens/migrate_personal_token";
  var data = {
    "client_id": "[my unique client_id]",
    "client_secret": "[my unique client_secret]", 
    "personal_token":"[my API token from Todoist dashboard]", 
    "scope": "data:read"
  };
  var payload = JSON.stringify(data);

  var headers = {
    "Content-Type":"application/json", 
  };

  var options = { 
    "method":"POST",
    "contentType" : "application/json",
    "headers": headers,
    "payload" : payload
  };

  var response = UrlFetchApp.fetch(url, options);
  var json = response.getContentText();
  var data = JSON.parse(json);
  return(data.access_token);  

}

function getTodoistTasks(){
  var apiURL = "https://todoist.com/API/v7/sync";

  var data = {
    "token" : getTodoistToken(),
    "sync_token" : '*',
    "resource_types" : '["items"]'
  };

  var payload = JSON.stringify(data);

  Logger.log(payload);
   var headers = {
     "Content-Type":"application/json", 
   };

  var options = { 
    "method":"POST",
    "contentType" : "application/json",
    "headers": headers,
    "payload" : payload,
    "muteHttpExceptions" : true
  };

  var response = UrlFetchApp.fetch(apiURL, options);

  Logger.log(response.getContentText()); 

}

Answer 1

我已经找到答案了。 Todoist API文档有点模棱两可，似乎是围绕POST请求编写的，但是要下载（同步）完整的任务列表，可以使用以下构造的简单URL编码的GET请求来达到目的：

function getTodoistTasks(){
  var apiURL = "https://todoist.com/API/v7/sync";
  var queryString = "?token=" + getTodoistTokenRev() + "&sync_token=%27*%27&resource_types=[%22items%22]";

  //Get params
  var fetchParameters = {};
  fetchParameters.method = 'get';
  fetchParameters.contentType = 'x-www-form-urlencoded';
  fetchParameters.muteHttpExceptions = true;

  //make request and return
  var response = UrlFetchApp.fetch(apiURL + queryString, fetchParameters);
  var syncData = JSON.parse(response.getContentText());
  return(syncData);
}

Answer 2

而且，如果有人像我一样正在寻找创建项目的示例（在本例中为任务），下面是该代码（请注意，您需要指定date_string和due_date才能显示在Web UI中）：

var API_URL = "https://todoist.com/API/v7/sync"
var BASE_QUERY = "?token=" + TOKEN

function addTask() {

//  var taskName = SpreadsheetApp.getUi().prompt('What the task\'s name?')
  var taskName = 'Test 1652'

  var commands = encodeURI(JSON.stringify([{
    "type": "item_add", 
    "temp_id": uuidv4(),
    "uuid": uuidv4(), 
    "args": {
      "content": taskName,
      "date_string": "today",
      "due_date_utc": "2017-12-2T18:00",
    }   
  }]))

  var queryString = BASE_QUERY + '&commands=' + commands

  var options = {
    method: 'post',
    contentType: 'x-www-form-urlencoded',
    muteHttpExceptions: true}

  var response = UrlFetchApp.fetch(API_URL + queryString, options)

  if (response.getResponseCode() !== 200) {
    var content = response.getContentText()
    throw new Error('URL fetch failed: ' + content) 
  }

  var syncData = JSON.parse(response.getContentText())
  return syncData

  // Private Functions
  // -----------------

  function uuidv4() {
    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {
      var r = Math.random() * 16 | 0, v = c == 'x' ? r : (r & 0x3 | 0x8);
      return v.toString(16);
    });
  }

} // addTask()