Groovy - 使用HttpBuilder的Jira OAuth集成

问题描述：

我想使用JIRA REST api获取数据，并提供JIRA OAuth authentication服务。Groovy - 使用HttpBuilder的Jira OAuth集成

基本上我可以使用ScribeJava和Groovy来实现这个任务。但我想，如下脱钩全部过程： -

请求来获取请求令牌
请求获得授权URL
请求访问令牌
请求得到实际数据使用HTTPBuilder

所以，我能够使用ScribeJava实现上述前三个步骤，并将accessToken存储为Database以供进一步的r eQUEST的数据如下： -

import java.security.KeyFactory 
import java.security.PrivateKey 
import java.security.spec.PKCS8EncodedKeySpec 

import com.github.scribejava.core.builder.api.DefaultApi10a 
import com.github.scribejava.core.model.OAuth1RequestToken 
import com.github.scribejava.core.services.RSASha1SignatureService 
import com.github.scribejava.core.services.SignatureService 


class JiraOauthProvider extends DefaultApi10a { 

    private String authURL 
    private String requestTokenURL 
    private String accessTokenURL 
    private String consumerPrivateKey 

    private JiraOauthProvider(authURL, requestTokenURL, accessTokenURL, consumerPrivateKey) { 
     this.authURL = authURL 
     this.requestTokenURL = requestTokenURL 
     this.accessTokenURL = accessTokenURL 
     this.consumerPrivateKey = consumerPrivateKey 
    } 

    private static JiraOauthProvider instance = null 

    public static JiraOauthProvider instance(Map map) { 
     if(instance == null) { 
      instance = new JiraOauthProvider(map.authURL, 
        map.requestTokenURL, 
        map.accessTokenURL, 
        map.consumerPrivateKey) 
     } 
     return instance 
    } 

    @Override 
    public String getAccessTokenEndpoint() { 
     return accessTokenURL 
    } 

    @Override 
    public String getRequestTokenEndpoint() { 
     return requestTokenURL 
    } 

    @Override 
    public String getAuthorizationUrl(OAuth1RequestToken requestToken) { 
     return String.format(authURL, requestToken.getToken()) 
    } 

    @Override 
    public SignatureService getSignatureService() { 
     return new RSASha1SignatureService(getPrivateKey()) 
    } 

    private PrivateKey getPrivateKey() { 
     byte[] key = Base64.getDecoder().decode(consumerPrivateKey) 
     PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(key) 
     KeyFactory kf = KeyFactory.getInstance("RSA") 
     return kf.generatePrivate(keySpec) 
    }

现在我建立OAuthService为： -

private static final String CALLBACK_URI = "callback-url" 
protected static final String CONSUMER_KEY = "consumer-key" 
protected static final String CONSUMER_PRIVATE_KEY = "private-key" 

Map oAuthMap = [ 
       "authURL" :"auth-url=%s", 
       "requestTokenURL":"request-token-url", 
       "accessTokenURL":"access-token-url", 
       "consumerPrivateKey":CONSUMER_PRIVATE_KEY 
      ] 

//Buid oauth service to get request token, auth url and access token 
OAuth10aService service = ServiceBuilder() 
       .apiKey(CONSUMER_KEY) 
       .apiSecret(CONSUMER_PRIVATE_KEY).callback(CALLBACK_URI) 
       .build(JiraOauthProvider.instance(oAuthMap)) 

OAuth1RequestToken requestToken = service.getRequestToken() 
def authURL = service.getAuthorizationUrl(requestToken) 

//Now after redirect to this authURL and providing credential I'm getting oauthVerifier code to get accessToken and secretToken 

def oauthVerifier = "oauth verifier code" 

//Now calling to get accessToken 
OAuth1AccessToken oAuth1AccessToken = service.getAccessToken(requestToken, oauthVerifier); 
def accessToken = oAuth1AccessToken.getToken() 
def secretToken = oAuth1AccessToken.getTokenSecret() 
//now I'm storing this `accessToken`and `secretToken` into DB for further future data request.

所以，毕竟上面的东西我能实现上述三个步骤和存储访问令牌进入db，以便将来只需要data。

所以要实现4步使用HTTPBuilder获得实际数据，我下面做一些事情： -

def http = new HTTPBuilder('base-url') 

http.auth.oauth CONSUMER_KEY, CONSUMER_PRIVATE_KEY, accessToken, secretToken 

http.request(Method.GET, ContentType.JSON) { req -> 
      uri.path = 'path' 
      response.success = { resp, json -> 
       println json 
      } 
      response.failure = { resp, json -> print json } 
     } 
    }

但是我却越来越响应为： -

{oauth_problem=signature_method_rejected}

所以，任何人都可以建议我如何使用HTTPBuilderOAuth身份验证使用accessToken和secretToken获得实际数据？

注意： - 我可以使用带OAuthRequest但要求ScribeJava API和获得实际的数据是使用HTTPBuilder

我只想要一个指针如何实现它得到实际的数据。

答

经过大量的搜索，我得到了解决方案from here。其实HTTPBuilder内部使用Signpost其签约使用HmacSha Signer而Jira rest api支持RSA-SHA1 Signer验证HttpRequest这就是为什么它给响应的要求： -

{oauth_problem=signature_method_rejected}

所以，基本上我所要做的定制RSA-SHA1 Signer拿到签名http请求。为了实现这一目标，我使用Google Data (GData) APIs签署使用数据RSA-SHA1 Signer如下之前HttprRequest： -

private static PrivateKey getPrivateKey(String consumerKey) { 
    try { 
     byte[] key = Base64.getDecoder().decode(consumerKey) 
     PKCS8EncodedKeySpec keySpec = new PKCS8EncodedKeySpec(key) 
     KeyFactory kf = KeyFactory.getInstance("RSA") 
     return kf.generatePrivate(keySpec) 
    } catch (Exception e) { 
     throw new RuntimeException(e) 
    } 
} 

import com.google.gdata.client.authn.oauth.OAuthParameters 
import com.google.gdata.client.authn.oauth.OAuthRsaSha1Signer 
import com.google.gdata.client.authn.oauth.OAuthUtil 
import com.google.gdata.client.authn.oauth.RsaSha1PrivateKeyHelper 

OAuthRsaSha1Signer rsaSigner = new OAuthRsaSha1Signer() 
rsaSigner.setPrivateKey(getPrivateKey(CONSUMER_PRIVATE_KEY)) 

OAuthParameters params = new OAuthParameters() 
params.setOAuthConsumerKey(CONSUMER_KEY) 
params.setOAuthNonce(OAuthUtil.getNonce()) 
params.setOAuthTimestamp(OAuthUtil.getTimestamp()) 
params.setOAuthSignatureMethod("RSA-SHA1") 
params.setOAuthType(OAuthParameters.OAuthType.TWO_LEGGED_OAUTH) 
params.setOAuthToken(accessToken) 

String paramString = params.getBaseParameters().sort().collect{it}.join('&') 

String baseString = [ 
     OAuthUtil.encode("GET"), 
     OAuthUtil.encode('base-url' + 'path'), 
     OAuthUtil.encode(paramString) 
    ].join('&') 

String signature = rsaSigner.getSignature(baseString, params); 

params.addCustomBaseParameter("oauth_signature", signature); 

//Now calling using HTTPBuilder with signed data 
def http = new HTTPBuilder('base-url') 

http.request(Method.GET, ContentType.JSON) { req -> 
     uri.path = 'path' 
     uri.query = params.getBaseParameters() 
     response.success = { resp, json -> 
      println json 
     } 
     response.failure = { resp, json -> print json } 
    } 
}

Groovy - 使用HttpBuilder的Jira OAuth集成

相关推荐