Post 请求因 python httplib2 而失败，适用于 curl

Question

我正在尝试从 fitbit API 请求访问令牌，但它一直返回 401 未授权状态，即使我将请求配置为与相应的 curl 查询相同 - 它成功了。返回的错误消息说："errorType":"invalid_client","message":"Invalid authorization header format. httplib2 构建其请求的方式是否有一些细微差别让我离开这里？...

（工作）curl 查询：

curl    -X POST -i 
-H 'Authorization: Basic <LONG_CODE>'
-H 'Content-Type: application/x-www-form-urlencoded' 
-d "clientId=<CLIENT_ID>" 
-d "grant_type=authorization_code" 
-d "redirect_uri=http%3A%2F%2F127.0.0.1%3A5000%2Ffitbit-callback" 
-d "code=<AUTHORIZATION_GRANT_CODE>" 
https://api.fitbit.com/oauth2/token

非工作 python 请求（已编辑）：

TOKEN_URL = 'https://api.fitbit.com'/oauth2/token'
CALLBACK_URI  = 'http://127.0.0.1:5000/fitbit-callback'

auth_header = base64.b64encode(bytes(<CLIENT_ID> + ':' + <CLIENT_SECRET>, 'utf-8'))
headers = {
    'Authorization': 'Basic %s' % auth_header,
    'Content-Type' : 'application/x-www-form-urlencoded'
    }

params = {
    'client_id': <CLIENT_ID>,
    'grant_type': 'authorization_code',
    'redirect_uri': CALLBACK_URI,
    'code': <AUTHORIZATION_GRANT_CODE>
    }
urlparams = urlencode(params)

resp, content = h.request(TOKEN_URL, 
    'POST', 
    urlparams,
    headers)

从代码中不明显：

python 中的 auth_header-变量匹配 <LONG_CODE>

python3 fitbit.py后的终端响应：

send: b"POST /oauth2/token HTTP/1.1\r\nHost: api.fitbit.com\r\nContent-Length: 153\r\nauthorization: Basic b'<LONG_CODE>'\r\ncontent-type: application/x-www-form-urlencoded\r\nuser-agent: Python-httplib2/0.10.3 (gzip)\r\naccept-encoding: gzip, deflate\r\n\r\n"
send: b'client_id=<CLIENT_ID>&grant_type=authorization_code&redirect_uri=http%3A%2F%2F127.0.0.1%3A5000%2Ffitbit-callback&code=<AUTHORIZATION_GRANT_CODE>'
reply: 'HTTP/1.1 401 Unauthorized\r\n'
header: Date header: Content-Type header: Transfer-Encoding header: Connection header: Cache-control header: WWW-Authenticate header: Content-Language header: Content-Encoding header: Vary header: X-Frame-Options header: Server header: CF-RAY

运行 print(content):

b'{"errors":[{"errorType":"invalid_client","message":"Invalid authorization header format. Visit https://dev.fitbit.com/docs/oauth2 for more information on the Fitbit Web API authorization process."}],"success":false}'

Answer 1

嗯，这很尴尬。在将请求定向到让我分析它们的请求捕获服务（如 runscope）之前，我没有注意到它，但我似乎只是错过了 python 示例中的 b'<LONG_CODE>' 格式。这修复了它：

auth_header.decode("utf-8")

也许应该删除这个问题，如果它不太可能帮助其他人...

Post 请求因 python httplib2 而失败，适用于 curl

Post request failing with python httplib2, works with curl

python

post

oauth

httplib2

fitbit