AppAuth iOS.用户在我自己的OAuth2服务器中注册帐户后如何保存令牌信息

Question

我有一个iOS应用程序和一个用Spring编写的后端,并实现了OAuth2机制.

signup我的后端有一个端点,它接受一些用户数据并返回OAuth2响应,例如

{
    "access_token":"9154140d-b621-4391-9fdd-fbba9e5e4188",
    "token_type":"bearer",
    "refresh_token":"dd612036-7cc6-4858-a30f-c548fc2a823c",
    "expires_in":89,
    "scope":"write"
}

之后我想保存OIDAuthState在我的钥匙串中,所以我做了以下事情:

func saveTokenResponse(responseDict: [String: NSCopying & NSObjectProtocol]) {
        let redirectURI = URL(string: kRedirectURI)
        let configuration = OIDServiceConfiguration(authorizationEndpoint: URL(string: kAuthorizationEndpoint)!, tokenEndpoint: URL(string: kTokenEndpoint)!)
        let request = OIDAuthorizationRequest(configuration: configuration, clientId: self.kClientID, scopes: ["write"], redirectURL: redirectURI!, responseType: OIDResponseTypeCode, additionalParameters: nil)

        let accessToken = responseDict["access_token"] ?? nil
        let tokenType = responseDict["token_type"] ?? nil
        let refreshToken = responseDict["refresh_token"] ?? nil
        let expiresIn = responseDict["expires_in"] ?? nil
        let scope = responseDict["scope"] ?? nil

        let response = OIDAuthorizationResponse(request: request, parameters: [
            "access_token": accessToken!,
            "token_type": tokenType!,
            "refresh_token": refreshToken!,
            "expires_in": expiresIn!,
            "scope": scope!
            ]
        )
        let authState = OIDAuthState(authorizationResponse: response) //here authState.refreshToken is nil, so it won't be serialized.

        updateAuthState(authState: authState) // it just saves it in keychain
    }

一切都运作良好,但令牌到期时我遇到了问题.该应用程序调用后端,AppAuth无法刷新令牌:

我可以看到,OIDAuthState对象中不存在刷新令牌.我检查了OIDAuthStatefrom 的初始化,OIDAuthorizationResponse发现在这种情况下没有分配令牌.

任何人都可以帮助我OIDAuthState从我的后端收到的OAuth响应中节省多少钱？或者我是以错误的方式做某事？

谢谢,

奥斯曼

Answer 1

如果您的令牌过期,那么您可以像所有应用程序(银行系统,亚马逊,Paytm和Facebook)一样移动登录屏幕(呼叫退出功能).因此,用户在使用您的凭据登录时,可以获得您想要的相同响应并需要刷新令牌.您已在登录Web服务中获得samilar信息,如下面的响应.我希望它的工作正常

    let accessToken = responseDict["access_token"] ?? nil
    let tokenType = responseDict["token_type"] ?? nil
    let refreshToken = responseDict["refresh_token"] ?? nil
    let expiresIn = responseDict["expires_in"] ?? nil
    let scope = responseDict["scope"] ?? nil

    let response = OIDAuthorizationResponse(request: request, parameters: [
        "access_token": accessToken!,
        "token_type": tokenType!,
        "refresh_token": refreshToken!,
        "expires_in": expiresIn!,
        "scope": scope!]
       )