Twitter仅应用程序身份验证始终返回401

Question

我正在尝试使用App only auth进行身份验证,并且我成功获取了持有者令牌,但是当我尝试调用REST API时,我总是收到401错误,这是我的代码:

private var accessToken: String?
private let consumerKey = "*********"
private let consumerSecret = "*********"
private let baseUrlString = "https://api.twitter.com/1.1/"
private let pageSize = 20

private func authenticate(completionBlock: Void -> ()) {

    if accessToken != nil {
        completionBlock()
    }

    let credentials = "\(consumerKey):\(consumerSecret)"
    let headers = ["Authorization": "Basic \(credentials.getBase64())"]
    let params: [String : AnyObject] = ["grant_type": "client_credentials"]

    Alamofire.request(.POST, "https://api.twitter.com/oauth2/token", headers: headers, parameters: params)
        .responseJSON { response in
            if let JSON = response.result.value {
                self.accessToken = JSON.objectForKey("access_token") as? String
                completionBlock()
            }
    }
}

func getTimelineForScreenName(screenName: String) {

    authenticate {

        guard let token = self.accessToken else {
            // TODO: Show authentication error
            return
        }

        let headers = ["Authorization": "Bearer \(token.getBase64())"]
        let params: [String : AnyObject] = [
            "screen_name" : screenName,
            "count": self.pageSize
        ]
        Alamofire.request(.GET, self.baseUrlString + "statuses/user_timeline.json", headers: headers, parameters: params)
            .responseJSON { response in
                print(response.response)

                if let JSON = response.result.value {
                    print(JSON)
                }
        }
    }
}

...

private extension String {
    func getBase64() -> String {
        let credentialData = self.dataUsingEncoding(NSUTF8StringEncoding)!
        return credentialData.base64EncodedStringWithOptions([])
    }
}

我尝试过生成新密钥但没有尝试,也尝试了在iOS 9中发现的这个错误中的建议,不要让Authorization标题在重定向上传递,但是这个请求没有使用任何重定向.

任何想法将不胜感激.

Answer 1

经过几个小时的调查后,我发现,使用Bearer Token的标头不应该被编码为base64,所以标题应该是这样的:
let headers = ["Authorization": "Bearer \(token)"].

我希望这有助于任何人尝试类似的东西,因为文档说你必须使用base64编码的令牌.

步骤3:使用承载令牌验证API请求
承载令牌可用于向支持仅应用程序验证的API端点发出请求.要使用承载令牌,请构造一个普通的HTTPS请求,并包含一个值为Bearer的Authorization标头<base64 bearer token value from step 2>.不需要签名.