如何使用omniauth google oauth2获取rails app的'refresh_token'？

Question

几个月前,我创建了一个使用oauth2进行身份验证的rails应用程序 - 特别是omniauth-google-oauth2 gem.我已经完成了创建身份验证并存储刷新令牌的所有步骤,但最近oauth2停止发送'refresh_token'作为响应的一部分.最初我收到的回复包含:

credentials: {
  refresh_token: XXX,
  token: YYY,
  expires_at: 1374840767,
  expires: true
},

现在我只收回一小时内到期的令牌:

credentials: {
  token: YYY,
  expires_at: 1374840767,
  expires: true
},

我真的不知道我在应用程序方面做了什么来改变这一点,所以我不确定谷歌是否有改变,或者我做了什么.对于上下文,我的代码如下:

初始化/ omniauth.rb:

Rails.application.config.middleware.use OmniAuth::Builder do
  provider :google_oauth2, 'KEY', 'SECRET', {:scope => "userinfo.email,userinfo.profile,analytics.readonly,adsense.readonly"}
end

authentications_controller.rb是我收到响应的地方:

def create
  auth = request.env["omniauth.auth"] 
  params = request.env["omniauth.params"]
  project = Project.find(params['project_id'])

  Authentication.create(:project_id => project.id, :provider => auth['provider'], :uid => auth['uid'], :access_token => auth['credentials']['refresh_token'])
  flash[:notice] = "Authentication successful."
  redirect_to owner_view_project_path(project)
end

我的initializers/omniauth.rb文件中是否可能缺少某些内容？我已经尝试将以下内容添加到选项哈希中,但这似乎没有带回刷新令牌:

:approval_prompt => "force", :access_type => "offline"

任何帮助将不胜感激!提前致谢!

Answer 1

该提示:"同意"是让你刷新令牌.这样的事情应该有效:

Rails.application.config.middleware.use OmniAuth::Builder do
  scopes = [
      # we need the profile scope in order to login
      "https://www.googleapis.com/auth/userinfo.profile",
      # this and other scopes could be added, but match them up with the
      # features you requested in your API Console
      "https://www.googleapis.com/auth/calendar"
    ]

  provider :google_oauth2, GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, { scope: scopes.join(" "), access_type: 'offline',  prompt: 'consent'}
end

Answer 2

看起来您需要userinfo.email并且userinfo.profile在您的范围内。

https://github.com/zquestz/omniauth-google-oauth2/issues/27