C# 网络编程之豆瓣OAuth2.0认证具体解释和遇到的各种问题及解决

一.误区OAuth1.0认证过程

二.获取autorization_code

首先在你须要參考的详细豆瓣官方文档就是:http://developers.douban.com/wiki/?title=oauth2

使用OAuth2.0流程详细例如以下:(官方文档)

1.应用向豆瓣请求授权

2.豆瓣为用户显示一个授权页面,用户在此页面确认是否允许授权

3.假设用户允许授权,应用汇获取到一个訪问令牌(access_token),通过此令牌用户能够訪问授权数据

4.假设訪问须要授权的Api,请使用https协议,加上access_token的Header.

以下具体解说

首先你须要申请API Key,在完毕申请过程中你须要注意3个值:API Key\Secret\回调地址.后面的程序须要应用,当使用的时候我会具体介绍.因为我是桌面client应用,授权流程为native-application flow.

依据它的详细流程我设计的界面例如以下图所看到的:

#region 定义变量
//申请的API Key
public string apiKey = "00489f145c2576bd00d9dd3d147064";
//申请的API 密钥
public string apiKeySecret = "72c36131ace8ea";
//申请的回调地址 我的应用URL
public string myurl = "http://www.baidu.com/";
//获取authorization_code
public Uri GetAuthorizationCode = new Uri("https://www.douban.com/service/auth2/auth");
//获取access_token
public Uri GetAccessToken = new Uri("https://www.douban.com/service/auth2/token");
//浏览器返回autorization_code
public string autorizationCode = "";
//AccessToken授权成功后返回的Json数据
public string accessToken = "";
public string userName = "";
public string userId = "";
public string expiresIn = "";
public string refreshToken = "";
#endregion

#region 第一步 浏览 获取authorization_code
//点击"浏览"显示豆瓣登录界面
private void button1_Click(object sender, EventArgs e)
{
//获取authorization_code构造URL
StringBuilder url = new StringBuilder(GetAuthorizationCode.ToString()); //可变字符串
//追加组合格式字符串
url.AppendFormat("?client_id={0}&", apiKey);
url.AppendFormat("redirect_uri={0}&", myurl);
url.AppendFormat("response_type={0}", "code");
//url.AppendFormat("scope={0}", "scope=shuo_basic_r,shuo_basic_w");
//显示输入URL
textBox1.Text = url.ToString();
string Input = url.ToString();
//将指定URL载入到WebBrowser控件中
webBrowser1.Navigate(Input);
}

//文件载入完毕后发生事件
private void webBrowser1_DocumentCompleted(object sender, WebBrowserDocumentCompletedEventArgs e)
{
//获取当前文档URL
string reUrl = this.webBrowser1.Url.ToString();
textBox1.Text = reUrl;
//获取https://www.example.com/back?code=9b73a4248中code值
if (!string.IsNullOrEmpty(reUrl))
{
//获取问号后面字符串
string LastUrl = reUrl.Substring(reUrl.LastIndexOf("?") + 1, (reUrl.Length - reUrl.LastIndexOf("?") - 1));
//依据參数间的&号获取參数数组 能够获取多个參数此时仅仅需一个code
string[] urlParam = LastUrl.Split('&');
foreach (string s in urlParam)
{
//将參数名与參数值赋值给数组 value[0]參数名称 value[1]參数值
string[] value = s.Split('=');
//MessageBox.Show("參数名称为:" + value[0] + " 參数值为:" + value[1]);
if (value[0] == "code")
{
autorizationCode = value[1];
}
}
}
//输出获取code值
if (autorizationCode != "") MessageBox.Show(autorizationCode);
}
#endregion

三.获取access_token

//获取的数据装换为Json格式 此时返回的json格式的数据
{
"access_token":"0e63c03dfb66c4172b2b40b9f2344c",
"douban_user_name":"Eastmount",
"douban_user_id":"57279898",
"expires_in":604800,
"refresh_token":"84406d40cc58e0ae8cc147c2650aa2",
}

#region 第二步 授权 获取access_token
private void button2_Click(object sender, EventArgs e)
{
//显示输入URL
textBox1.Text = GetAccessToken.ToString();
//获取access_token构造POST參数
StringBuilder url = new StringBuilder(""); // 可变字符串
//追加组合格式字符串
url.AppendFormat("client_id={0}&", apiKey);
url.AppendFormat("client_secret={0}&", apiKeySecret);
url.AppendFormat("redirect_uri={0}&", myurl);
url.AppendFormat("grant_type={0}&", "authorization_code");
url.AppendFormat("code={0}", autorizationCode);
//获取POST提交数据返回内容
string AccessContent = sendMessage(GetAccessToken.ToString(), url.ToString());
webBrowser1.DocumentText = AccessContent;
//获取的数据装换为Json格式 此时返回的json格式的数据
JObject obj = JObject.Parse(AccessContent);
accessToken = (string)obj["access_token"];   //access_token
userName = (string)obj["douban_user_name"];  //豆瓣username
userId = (string)obj["douban_user_id"];      //用户id
expiresIn = (string)obj["expires_in"];       //生命周期 604800秒=7天
refreshToken = (string)obj["refresh_token"]; //刷新令牌
MessageBox.Show(accessToken + "\n" + userName + "\n" +
userId + "\n" + expiresIn + "\n" + refreshToken);
}

//发送消息Post方法
public static string sendMessage(string strUrl, string PostStr)
{
try
{
//设置消息头
CookieContainer objCookieContainer = null;
HttpWebRequest request = (HttpWebRequest)WebRequest.Create(strUrl);
request.Method = "Post";
request.ContentType = "application/x-www-form-urlencoded";
request.Referer = strUrl;
if (objCookieContainer == null)
objCookieContainer = new CookieContainer();

request.CookieContainer = objCookieContainer;
byte[] byteData = Encoding.UTF8.GetBytes(PostStr.ToString().TrimEnd('&'));
request.ContentLength = byteData.Length;
using (Stream reqStream = request.GetRequestStream())
{
reqStream.Write(byteData, 0, byteData.Length);
}
//Response应答流获取数据
string strResponse = "";
using (HttpWebResponse res = (HttpWebResponse)request.GetResponse())
{
objCookieContainer = request.CookieContainer;
using (Stream resStream = res.GetResponseStream())
{
using (StreamReader sr = new StreamReader(resStream, Encoding.UTF8)) //UTF8
{
strResponse = sr.ReadToEnd();
}
}
// res.Close();
}
return strResponse;
}
catch (Exception e)
{
Console.WriteLine(e.ToString());
Console.Read();
}
return null;
}
#endregion

四.使用access_token

curl "https://api.douban.com/v2/user/~me"
-H "Authorization: Bearer a14afef0f66fcffce3e0fcd2e34f6ff4"

#region 第三步 豆瓣訪问授权数据
private void button3_Click(object sender, EventArgs e)
{
try
{
//获取当前授权用户信息 须要必须先进行API认证授权,返回当前授权的UserInfo
string Input = "https://api.douban.com/v2/user/~me";
textBox1.Text = Input;
//HttpWebRequest对象实例:该类用于获取和操作HTTP请求
var request = (HttpWebRequest)WebRequest.Create(Input); //Create:创建WebRequest对象
//设置请求方法为GET
request.Headers.Add("Authorization", "Bearer " + accessToken);
request.Method = "GET";
//HttpWebResponse对象实例:该类用于获取和操作HTTP应答
var response = (HttpWebResponse)request.GetResponse(); //GetResponse:获取答复
//构造数据流对象实例
Stream stream = response.GetResponseStream(); //GetResponseStream:获取应答流
StreamReader sr = new StreamReader(stream); //从字节流中读取字符
//从流当前位置读取到末尾并显示在WebBrower控件中
string content = sr.ReadToEnd();
webBrowser1.DocumentText = content;
//关闭响应流
stream.Close();
sr.Close();
response.Close();
}
catch (Exception msg) //异常处理
{
MessageBox.Show(msg.Message);
}
}
#endregion

五.总结