Ebay OAuth API 错误：invalid_grant - 提供的授权授予代码无效或已颁发给其他客户端

Question

我正在尝试使用以下文档从 eBay API 获取 OAuth 用户访问令牌： https://developer.ebay.com/api-docs/static/oauth-authorization-code-grant.html

如果我使用以下代码，我的代码可以完美运行："grant_type": "client_credentials"

但是当我打电话时："grant_type": "authorization_code" 我收到此错误：

{'error': 'invalid_grant', 'error_description': '提供的授权授予代码无效或已颁发给其他客户端'}

这是我的代码：

    # 1. Send a user to authorize your app
    auth_url = ('https://auth.sandbox.ebay.com/oauth2/authorize?client_id=Software-Software-SBX-2dc485992e-65aa6c75&response_type=code&redirect_uri=Soft_ware_-Software-Softwa-zwdqqdbxx&scope=https://api.ebay.com/oauth/api_scope https://api.ebay.com/oauth/api_scope/buy.order.readonly https://api.ebay.com/oauth/api_scope/buy.guest.order https://api.ebay.com/oauth/api_scope/sell.marketing.readonly https://api.ebay.com/oauth/api_scope/sell.marketing https://api.ebay.com/oauth/api_scope/sell.inventory.readonly https://api.ebay.com/oauth/api_scope/sell.inventory https://api.ebay.com/oauth/api_scope/sell.account.readonly https://api.ebay.com/oauth/api_scope/sell.account https://api.ebay.com/oauth/api_scope/sell.fulfillment.readonly https://api.ebay.com/oauth/api_scope/sell.fulfillment https://api.ebay.com/oauth/api_scope/sell.analytics.readonly https://api.ebay.com/oauth/api_scope/sell.marketplace.insights.readonly https://api.ebay.com/oauth/api_scope/commerce.catalog.readonly https://api.ebay.com/oauth/api_scope/buy.shopping.cart https://api.ebay.com/oauth/api_scope/buy.offer.auction https://api.ebay.com/oauth/api_scope/commerce.identity.readonly https://api.ebay.com/oauth/api_scope/commerce.identity.email.readonly https://api.ebay.com/oauth/api_scope/commerce.identity.phone.readonly https://api.ebay.com/oauth/api_scope/commerce.identity.address.readonly https://api.ebay.com/oauth/api_scope/commerce.identity.name.readonly https://api.ebay.com/oauth/api_scope/commerce.identity.status.readonly https://api.ebay.com/oauth/api_scope/sell.finances https://api.ebay.com/oauth/api_scope/sell.item.draft https://api.ebay.com/oauth/api_scope/sell.payment.dispute https://api.ebay.com/oauth/api_scope/sell.item https://api.ebay.com/oauth/api_scope/sell.reputation https://api.ebay.com/oauth/api_scope/sell.reputation.readonly')

    webbrowser.open_new(auth_url)

    # 2. Users are redirected back to you with a code

    url = input('enter url: ')
    start_number = auth_res_url.find('code=') + len('code=')
    end_number = auth_res_url.find('&expires_in')
    auth_code = auth_res_url[start_number:end_number]

    # 3. Exchange the code

    with open(r'ebay.yaml') as file:
        config = yaml.load(file, Loader=yaml.FullLoader)

    b64_id_secret = base64.b64encode(bytes(config['api.sandbox.ebay.com']['appid'] + ':' + config['api.sandbox.ebay.com']['certid'], 'utf-8')).decode('utf-8')

    response = requests.post("https://api.sandbox.ebay.com/identity/v1/oauth2/token",
                             headers={
                                      "Content-Type": "application/x-www-form-urlencoded",
                                      "Authorization": "Basic " + b64_id_secret
                                     },
                             data={
                                      "grant_type": "authorization_code",
                                      "code": auth_code,
                                      "redirect_uri": 'XXXXX HIDDEN XXXXX'
                                  })
    token = response.json()
    print(token)

重新阅读所有手册和搜索结果后，我的大脑感到疼痛。请帮忙！

Answer 1

我解决了！！！！

\n

基本上，当您授权您的应用程序时，它会将您重定向到redirect_uri，又名（RuName）。\n与 的区别在于，它返回一个更加复杂的字符串，该字符串以URL 编码格式"grant_type": "authorization_code"返回。这是特殊字符被编码为 URL 友好字符的地方

\n

示例： quote(\'/El Ni\xc3\xb1o/\') 产生 \'/El%20Ni%C3%B1o/\'

\n

从 ebay 返回的代码如下所示：

\n

code=v%5E1.1%23i%5E1%23I%5E3%41f%5E0%23p%5E3%23r%5E1%23t%5EUl32XzE6M0RBRDYyQTk4RTg5NTcwNzdFODVGQjFFN0MzQjMyMTRfMxI0VeMTI4NA%3D%3D

\n

我使用以下命令取消了 URL 格式：https ://docs.python.org/3/library/urllib.parse.html

\n

from urllib.parse import unquote\n

\n

...并添加了取消引用功能，将 ebay 中的 URL 解码回正常状态

\n

url = input(\'enter url: \')\nurl = unquote(url)\n

\n

这使得授权码看起来应该是这样的：\ncode=v^1.1#i^1#I^3Af^0#p^3#r^1#t^Ul32XzE6M0RBRDYyQTk4RTg5NTcwNzdFODVGQjFFN0MzQjMyMTRfMxI0VeMTI4NA==

\n

现在我有了我的代币！！！！！！

\n