将refresh_token交换为access_token的最佳方法是什么？ （Google API）

Question

I make many different api calls to google api using access_token so I need to handle case when access_token is expired and exchange refresh_token to get new one.

What is the best way to do this?

I guess turn every API call with try{}catch(){} block.

If an exception rise, in catch() block I will make another API call to validate access_token through https://www.googleapis.com/oauth2/v1/tokeninfo?access_token={accessToken} endpoint.

This is probably not a good idea to turn every API call to try() catch(){} block and duplicate catch () logic.

How can i do it better?

P.S. I am using guzzle library for making API calls.

Answer 1

If you're using a library provided by Google to make your calls, then I suggest you check if the library does not already handle the retry for you. The Java library does this and I suspect the Python library also does.

If you're not using a library, check if there would not be one available for your language. If will greatly help you.

If you really don't have a choice and can't use Google's libraries, then I suggest you mimic their behavior in your own code. This would mean creating a kind of GoogleRequest behavior (a class, a module or something similar depending on your language). This behavior would provide an execute() method that would handle the authentication error, refresh the token and retry the request.

By the way the URL used to refresh a token is not the one you listed in your question. You must send a POST request to the URL https://www.googleapis.com/oauth2/v3/token with this body :

client_secret=YOUR_CLIENT_SECRET&grant_type=refresh_token&refresh_token=YOUR_REFRESH_TOKEN&client_id=YOUR-CLIENT_ID