将Google oauth2与Go一起使用

Question

I'm working with Go and I would like to use the Google API. From the doc, I found this example :

// Your credentials should be obtained from the Google
// Developer Console (https://console.developers.google.com).
conf := &oauth2.Config{
    ClientID:     "YOUR_CLIENT_ID",
    ClientSecret: "YOUR_CLIENT_SECRET",
    RedirectURL:  "YOUR_REDIRECT_URL",
    Scopes: []string{
        "https://www.googleapis.com/auth/bigquery",
        "https://www.googleapis.com/auth/blogger",
    },
    Endpoint: google.Endpoint,
}
// Redirect user to Google's consent page to ask for permission
// for the scopes specified above.
url := conf.AuthCodeURL("state")
fmt.Printf("Visit the URL for the auth dialog: %v", url)

// Handle the exchange code to initiate a transport.
tok, err := conf.Exchange(oauth2.NoContext, "authorization-code")
if err != nil {
    log.Fatal(err)
}
client := conf.Client(oauth2.NoContext, tok)
client.Get("...")

I have two questions :

• What is the redirect_url? In the Developers Console, I can get my client_id and my client_secret but I don't know what is the redirect_url. Where can I find it?

• What is the authorization_code? Where can I find it?

Thanks

Answer 1

The way OAuth works is,

1) You register you application with the vendor in this case its Google, when you do the registration you will receive a ApplicationID(or clientID) and a secret key. This ApplicationID is the uniqueID for your application in the google app world.

2) when you ask your user to authenticate themselves with google you will redirect the user to the Google Authentication page with you ApplicationID and the redirect URL. Note, here the redirect URL is your page.

3) Once the user Authenticate themselves and provides your application with Authorization, google with redirect the user to your redirect URL with a code.

4) You can think of this code as a identifier of the entire Authentication session

5) Now the user has been Authenticated but how will google know that the ApplicationID that you have passed belongs to you and you are not impersonating someone else, to ensure this you have to pass the code that you received in Step3 back to google along with you ApplicationId and the Secret Key, when you do that Google will authenticate you and ensure that you are the owner of this application and it will then Provide you with a bearer Auth Token and a refresh auth Token.

6) Now the authentication and Authorization is complete and for API calls you can use the bearer token for Authorization and when the bearer token expires you can use the refresh token to get a new bearer token.

Hope this helps