java接入google登录与本人遇到的坑

向右看齐 2024-04-17 14:39 9阅读 0赞

官网文档：[https://developers.google.com/identity/sign-in/web/sign-in][https_developers.google.com_identity_sign-in_web_sign-in]

1，流程：

方案一，可以全部由后端处理，方案二，可以前后端配合，前端通过google的js吊起google登录，登录后，前端传给后端一个id\_token,后端进行认证，认证id\_token的正确性和aud是否跟你的应用aud一致，确保请求是从你的应用发出的。

注意：1，发出认证的ip地址必须是在google开发者账号中创建账号时配置的地址，否则请求不过去，报错：connect reset

2，httpClient必须是https，否则被google拦截。

大家也可以参考：[https://codeload.github.com/vstaryw/third\_party\_login/zip/master][https_codeload.github.com_vstaryw_third_party_login_zip_master]    这里有google，qq，新郎，微信，等等

代码：

package com.messcat.app.utils;
    
    import com.alibaba.fastjson.JSON;
    import com.messcat.imgrnt.custom.dao.model.GoogleInfoResult;
    import java.io.Serializable;
    import org.apache.commons.lang.StringUtils;
    import org.slf4j.Logger;
    import org.slf4j.LoggerFactory;
    
    /**
     * google验证token工具类
     *
     * @author sy
     * @date 2019/8/27 14:10
     */
    public class GoogleCheckTokenUtils implements Serializable {
    
      /**
       * 验证token的地址
       */
      private static final String GOOGLE_URL = "https://oauth2.googleapis.com/tokeninfo";
    
      /**
       * 开发者账号上申请的应用的client_id
       */
      private static final String CLIENT_ID = "********";
    
      /**
       * 默认编码为utf-8
       */
      private static final String charset = "utf-8";
    
    
      /**
       * slf4j打印日志
       */
      private static Logger logger = LoggerFactory.getLogger(GoogleCheckTokenUtils.class);
    
    
      /**
       * 判断id_token是否生效,
       */
      public static GoogleInfoResult checkGoogleToken(String idToken) {
        //判断idToken是否为空或者null
        if (!StringUtils.isNotBlank(idToken)) {
          return null;
        }
        //构建url和参数
        StringBuffer sb = new StringBuffer();
        sb.append(GOOGLE_URL);
        sb.append("?id_token=");
        sb.append(idToken);
        String result = HttpClientUtil.doGet(sb.toString(), charset);
        logger.info("google token check result is : {} ",result);
        if (StringUtils.isBlank(result)) {
          return null;
        }
        //转成Object对象
        GoogleInfoResult googleInfoResult = JSON.parseObject(result, GoogleInfoResult.class);
        //比较aud,判断是否请求来源你的程序
        if (googleInfoResult != null && googleInfoResult.getAud().equals(CLIENT_ID)) {
          return googleInfoResult;
        }
        return null;
      }
    
    
    }

import java.util.ArrayList;
    import java.util.Iterator;  
    import java.util.List;  
    import java.util.Map;  
    import java.util.Map.Entry;  
    import org.apache.http.HttpEntity;  
    import org.apache.http.HttpResponse;  
    import org.apache.http.NameValuePair;  
    import org.apache.http.client.HttpClient;  
    import org.apache.http.client.entity.UrlEncodedFormEntity;
    import org.apache.http.client.methods.HttpGet;
    import org.apache.http.client.methods.HttpPost;
    import org.apache.http.message.BasicNameValuePair;
    import org.apache.http.util.EntityUtils;
    /* 
     * 利用HttpClient进行post请求的工具类(https发送)
     */  
    public class HttpClientUtil {  
        public String doPost(String url,Map<String,String> map,String charset){  
            HttpClient httpClient = null;  
            HttpPost httpPost = null;  
            String result = null;  
            try{  
                httpClient = new SSLClient();  
                httpPost = new HttpPost(url);  
                //设置参数  
                List<NameValuePair> list = new ArrayList<NameValuePair>();  
                Iterator iterator = map.entrySet().iterator();  
                while(iterator.hasNext()){  
                    Entry<String,String> elem = (Entry<String, String>) iterator.next();  
                    list.add(new BasicNameValuePair(elem.getKey(),elem.getValue()));  
                }  
                if(list.size() > 0){  
                    UrlEncodedFormEntity entity = new UrlEncodedFormEntity(list,charset);  
                    httpPost.setEntity(entity);  
                }  
                HttpResponse response = httpClient.execute(httpPost);  
                if(response != null){  
                    HttpEntity resEntity = response.getEntity();  
                    if(resEntity != null){  
                        result = EntityUtils.toString(resEntity,charset);  
                    }  
                }  
            }catch(Exception ex){  
                ex.printStackTrace();  
            }  
            return result;  
        }
    
        /**
         * 发送get请求
         * @param url       链接地址
         * @param charset   字符编码，若为null则默认utf-8
         * @return
         */
        public static String doGet(String url,String charset){
            if(null == charset){
                charset = "utf-8";
            }
            HttpClient httpClient = null;
            HttpGet httpGet= null;
            String result = null;
    
            try {
                httpClient = new SSLClient();
                httpGet = new HttpGet(url);
    
                HttpResponse response = httpClient.execute(httpGet);
                if(response != null){
                    HttpEntity resEntity = response.getEntity();
                    if(resEntity != null){
                        result = EntityUtils.toString(resEntity,charset);
                    }
                }
            } catch (Exception e) {
                e.printStackTrace();
            }
            return result;
        }
    
    
    }

package com.messcat.app.utils;
    
    import java.security.cert.CertificateException;
    import java.security.cert.X509Certificate;  
    import javax.net.ssl.SSLContext;  
    import javax.net.ssl.TrustManager;  
    import javax.net.ssl.X509TrustManager;  
    import org.apache.http.conn.ClientConnectionManager;  
    import org.apache.http.conn.scheme.Scheme;  
    import org.apache.http.conn.scheme.SchemeRegistry;  
    import org.apache.http.conn.ssl.SSLSocketFactory;  
    import org.apache.http.impl.client.DefaultHttpClient;  
    //用于进行Https请求的HttpClient  
    public class SSLClient extends DefaultHttpClient{  
        public SSLClient() throws Exception{  
            super();  
            SSLContext ctx = SSLContext.getInstance("TLS");  
            X509TrustManager tm = new X509TrustManager() {  
                    @Override  
                    public void checkClientTrusted(X509Certificate[] chain,  
                            String authType) throws CertificateException {  
                    }  
                    @Override  
                    public void checkServerTrusted(X509Certificate[] chain,  
                            String authType) throws CertificateException {  
                    }  
                    @Override  
                    public X509Certificate[] getAcceptedIssuers() {  
                        return null;  
                    }  
            };  
            ctx.init(null, new TrustManager[]{tm}, null);  
            SSLSocketFactory ssf = new SSLSocketFactory(ctx,SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);  
            ClientConnectionManager ccm = this.getConnectionManager();  
            SchemeRegistry sr = ccm.getSchemeRegistry();  
            sr.register(new Scheme("https", 443, ssf));  
        }  
    }

有不懂的可在下方评论：

声明：httpClient有引用其他文章，

[https_developers.google.com_identity_sign-in_web_sign-in]: https://developers.google.com/identity/sign-in/web/sign-in
[https_codeload.github.com_vstaryw_third_party_login_zip_master]: https://codeload.github.com/vstaryw/third_party_login/zip/master