我正在根据以下内容通过 Google+ 进行身份验证: https://developers.google.com/+/mobile/android/sign-in

这个过程的大部分看起来都很好。我遇到的问题是我们需要获得“一次性授权码”，以便我们的后端服务器可以在用户许可的情况下代表用户执行某些请求。这在“为您的应用程序启用服务器端 api 访问”部分进行了介绍。但是，出于多种原因，我们的服务器可能导致登录失败，即使授权码有效(例如，用户在我们的服务器上还没有与 google+ 帐户对应的帐户) ，在这种情况下他们可以制作一个)。

如果发生这种情况，我们可能需要他们稍后再次登录。不过，我发现的是，当我使用 google+ 执行第二次登录时，它会给我相同的授权码，即使它已经被我们的服务器使用过。我试过断开连接并重新连接到 google 客户端 api，并调用 GoogleApiClient.clearDefaultAccountAndReconnect()，但无论我做什么，我似乎都得到了相同的授权代码。这当然会在服务器尝试使用它时被拒绝，因为它已经被使用过。

我想知道我在这里做错了什么。我有以下方法，它在初始身份验证过程中被调用，然后如果从我们的服务器检测到 500 的响应状态(表明之前的调用失败，大概是因为代码已经被用过):

  private void dispatchGooglePlusAuthCodeAcquisition() {
    AsyncTask<Void, Void, String> authAcquisition = new AsyncTask<Void, Void, String>() {
      @Override
      protected String doInBackground(Void... params) {
        Bundle authPreferences = new Bundle();
        mUserPermissionNeededForAuthCode = false;
        authPreferences.putString(GoogleAuthUtil.KEY_REQUEST_VISIBLE_ACTIVITIES,
                                "");
        String scopesString = Scopes.PROFILE;
        WhenIWorkApplication app = (WhenIWorkApplication)WhenIWorkApplication.getInstance();
        String serverClientID = app.getGoogleOAuthClientIDForPersonalServer();
        String scope = "oauth2:server:client_id:" + serverClientID + ":api_scope:" + scopesString;
        String code = null;
        authPreferences.putBoolean(GoogleAuthUtil.KEY_SUPPRESS_PROGRESS_SCREEN, true);

        try {
          code = GoogleAuthUtil.getToken(
            mActivity,
            Plus.AccountApi.getAccountName(mGoogleApiClient),
            scope,
            authPreferences
          );
        } catch (IOException transientEx) {
          // network or server error, the call is expected to succeed if you try again later.
          // Don't attempt to call again immediately - the request is likely to
          // fail, you'll hit quotas or back-off.
          Log.d(LOGTAG, "Encountered an IOException while trying to login to Google+."
                                   + " We'll need to try again at a later time.");
        } catch (UserRecoverableAuthException e) {
          mUserPermissionNeededForAuthCode = true;
          // Requesting an authorization code will always throw
          // UserRecoverableAuthException on the first call to GoogleAuthUtil.getToken
          // because the user must consent to offline access to their data.  After
          // consent is granted control is returned to your activity in onActivityResult
          // and the second call to GoogleAuthUtil.getToken will succeed.
          if (!mGooglePlusPermissionActivityStarted) {
            mGooglePlusPermissionActivityStarted = true;
            mActivity.startActivityForResult(e.getIntent(), RESULT_CODE_AUTH_CODE);
          }
        } catch (GoogleAuthException authEx) {
          // Failure. The call is not expected to ever succeed so it should not be
          // retried.
          Log.e(LOGTAG, "Unable to authenticate to Google+. Call will likely never"
                                   + " succeed, so bailing.", authEx);
        }

        return code;
      }

      @Override
      protected void onPostExecute(String aResult) {
        if (aResult != null) {
          // We retrieved an authorization code successfully.
          if (mAPIAccessListener != null) {
            mAPIAccessListener.onAuthorizationCodeGranted(aResult);
          }
        } else if (!mUserPermissionNeededForAuthCode) {
          // If this is the case, then we didn't get authorization from the user, or something
          // else happened.
          if (mAPIAccessListener != null) {
            mAPIAccessListener.onAuthorizationFailed();
          }

          Log.d(LOGTAG, "Unable to login because authorization code retrieved was null");
        }
      }
    };

    authAcquisition.execute();

最佳答案

所以，这个问题的答案比我想象的要简单得多。显然，GoogleAuthUtil 类中有一个clearToken() 方法:

http://developer.android.com/reference/com/google/android/gms/auth/GoogleAuthUtil.html#clearToken%28android.content.Context,%20java.lang.String%29

public static void clearToken (Context context, String token)

Clear the specified token in local cache with respect to the Context. Note that the context must be the same as that used to initialize the token in a previous call to getToken(Context, String, String) or getToken(Context, String, String, Bundle).

Parameters

context Context of the token.
token The token to clear.

Throws

GooglePlayServicesAvailabilityException
GoogleAuthException
IOException

在尝试重新验证之前调用此方法会导致 Google 生成一个新的一次性授权 token 。

关于android - 为 Android 上的 Google+ 重新生成 "one time authorization code"，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/29758639/