如何使用Smack API使用AccountManager的身份验证令牌对Google Talk进行身份验证？

Question

此问题类似于:使用authToken对Google Talk(XMPP,Smack)进行身份验证

1. 我有android.accounts.AccountManager类及其获取Google帐户身份验证令牌的方法:

   public AccountManagerFuture<Bundle> getAuthToken (Account account,
          String authTokenType, Bundle options, Activity activity,
          AccountManagerCallback<Bundle> callback, Handler handler)
   

2. 我知道如何准备身份验证XML:

   jidAndToken ="\0" + UTF8(YOURUSERNAME@gmail.com) + "\0" + Auth
   

   (其中"\ 0"旨在是一个值为零的单个八位字节).在最初的SASL auth中使用它:

   <auth xmlns='urn:ietf:params:xml:ns:xmpp-sasl' 
         mechanism='X-GOOGLE-TOKEN'>Base64(jidAndToken)</auth>
   

但是我无法将其与Smack API集成,就像有人在Facebook聊天一样:XMPP与Java Asmack库支持X-FACEBOOK-PLATFORM

有人能帮我吗？

Answer 1

维杰,

你的代码对我非常感谢!我在这里发帖是为了解决使用AccountManager登录Google Talk的问题.到目前为止,我还没有找到完整的解决方案,但我已经根据上面的代码开发了我的,并纠正了几行不起作用.

该解决方案分为两部分.第一个是基于上述想法和代码.它是创建SASLMechanism的子类:

import java.io.IOException;
import java.net.URLEncoder;

import org.jivesoftware.smack.SASLAuthentication;
import org.jivesoftware.smack.XMPPException;
import org.jivesoftware.smack.packet.Packet;
import org.jivesoftware.smack.sasl.SASLMechanism;

import android.util.Base64;
import android.util.Log;

public class GTalkOAuth2 extends SASLMechanism {
public static final String NAME="X-GOOGLE-TOKEN";


public GTalkOAuth2(SASLAuthentication saslAuthentication) {
    super(saslAuthentication);
}

@Override
protected String getName() {
    return NAME;
}

static void enable() { }

@Override
protected void authenticate() throws IOException, XMPPException
{
    String authCode = password;
    String jidAndToken = "\0" + URLEncoder.encode( authenticationId, "utf-8" ) + "\0" + authCode;

    StringBuilder stanza = new StringBuilder();
    stanza.append( "<auth mechanism=\"" ).append( getName() );
    stanza.append( "\" xmlns=\"urn:ietf:params:xml:ns:xmpp-sasl\">" );
    stanza.append( new String(Base64.encode( jidAndToken.getBytes( "UTF-8" ), Base64.DEFAULT ) ) );

    stanza.append( "</auth>" );

    Log.v("BlueTalk", "Authentication text is "+stanza);
    // Send the authentication to the server
    getSASLAuthentication().send( new Auth2Mechanism(stanza.toString()) );
}

public class Auth2Mechanism extends Packet {
    String stanza;
    public Auth2Mechanism(String txt) {
        stanza = txt;
    }
    public String toXML() {
        return stanza;
    }
}

/**
 * Initiating SASL authentication by select a mechanism.
 */
public class AuthMechanism extends Packet {
    final private String name;
    final private String authenticationText;

    public AuthMechanism(String name, String authenticationText) {
        if (name == null) {
            throw new NullPointerException("SASL mechanism name shouldn't be null.");
        }
        this.name = name;
        this.authenticationText = authenticationText;
    }

    public String toXML() {
        StringBuilder stanza = new StringBuilder();
        stanza.append("<auth mechanism=\"").append(name);
        stanza.append("\" xmlns=\"urn:ietf:params:xml:ns:xmpp-sasl\">");
        if (authenticationText != null &&
                authenticationText.trim().length() > 0) {
            stanza.append(authenticationText);
        }
        stanza.append("</auth>");
        return stanza.toString();
    }
    }
}

第二部分是使用它.没有其他例子给我的重要事情是,当从AccountManager系统获取令牌时,令牌类型不是"啊"而是"邮件".这个想法是在与谷歌服务器直接通信以获取令牌但不从AccountManager请求它的示例中.将它们放在一起使您需要在驱动程序代码中执行以下操作.创建一个获取令牌的函数:

public String getAuthToken(String name)
{
    Context context = getApplicationContext();
    Activity activity = this;
    String retVal = "";
    Account account = new Account(name, "com.google");
    AccountManagerFuture<Bundle> accFut = AccountManager.get(context).getAuthToken(account, "mail", null, activity, null, null);
    try
    {
        Bundle authTokenBundle = accFut.getResult();
        retVal = authTokenBundle.get(AccountManager.KEY_AUTHTOKEN).toString();
    }
    catch (OperationCanceledException e)
    {
        // TODO Auto-generated catch block
        e.printStackTrace();
    }
    catch (AuthenticatorException e)
    {
        // TODO Auto-generated catch block
        e.printStackTrace();
    }
    catch (IOException e)
    {
        // TODO Auto-generated catch block
        e.printStackTrace();
    }
    return retVal;
}

然后在确保使用正确的SASL系统后调用它:

SASLAuthentication.registerSASLMechanism( GTalkOAuth2.NAME, GTalkOAuth2.class );
SASLAuthentication.supportSASLMechanism( GTalkOAuth2.NAME, 0 );
config.setSASLAuthenticationEnabled(true);

String saslAuthString = getAuthToken(acct.name);
connection = new XMPPConnection(config);
try {
    connection.connect();
    connection.login(name, saslAuthString);
} catch (XMPPException e) {
    // Most likely an expired token
    // Invalidate the token and start over. There are example of this available
}

快乐的谷歌说话!

Answer 2

我知道这个线程有点旧，但我想我会帮忙......所以这是我的类，它似乎可以使用令牌机制连接到 Gtalk。说实话，我宁愿使用 oauth2 ..但这似乎工作正常。确保您的用户名类似于 "<your_user>@gmail.com"并且应该有效：

public class GoogleTalkAuthentication extends SASLMechanism
{
    static
    {
        SASLAuthentication.registerSASLMechanism( "X-GOOGLE-TOKEN", GoogleTalkAuthentication.class );
        SASLAuthentication.supportSASLMechanism( "X-GOOGLE-TOKEN", 0 );
    }

    public GoogleTalkAuthentication( SASLAuthentication saslAuthentication )
    {
        super( saslAuthentication );
    }

    @Override
    protected String getName()
    {
        return "X-GOOGLE-TOKEN";
    }

    @Override
    public void authenticate( String username, String host, String password ) throws IOException, XMPPException
    {
        super.authenticate( username, host, password );
    }

    @Override
    protected void authenticate() throws IOException, XMPPException
    {
        String authCode = getAuthCode( authenticationId, password );
        String jidAndToken = "\0" + URLEncoder.encode( authenticationId, "utf-8" ) + "\0" + authCode;

        StringBuilder stanza = new StringBuilder();
        stanza.append( "<auth mechanism=\"" ).append( getName() );
        stanza.append( "\" xmlns=\"urn:ietf:params:xml:ns:xmpp-sasl\">" );
        stanza.append( Base64.encode( jidAndToken.getBytes( "UTF-8" ) ) );

        stanza.append( "</auth>" );

        // Send the authentication to the server
        getSASLAuthentication().send( stanza.toString() );
    }

    public static String getAuthCode( String username, String password ) throws IOException
    {
        StringBuilder urlToRead = new StringBuilder();
        urlToRead.append( "https://www.google.com/accounts/ClientLogin?accountType=GOOGLE&service=mail&" );
        urlToRead.append( "Email=" + username + "&" );
        urlToRead.append( "Passwd=" + password );

        URL url = new URL( urlToRead.toString() );
        HttpURLConnection conn = (HttpURLConnection) url.openConnection();
        conn.setRequestMethod( "GET" );

        BufferedReader rd = new BufferedReader( new InputStreamReader( conn.getInputStream() ) );

        try
        {
            String line;
            while ( ( line = rd.readLine() ) != null )
            {
                if ( line.startsWith( "Auth=" ) )
                    return line.substring( 5 );
            }

            return null;
        }
        finally
        {
            rd.close();
        }
    }

    public static void main( String[] args ) throws IOException
    {
        String username = "";
        String password = "";

        String authCode = getAuthCode( username, password );
        String jidAndToken = "\0" + URLEncoder.encode( username, "utf-8" ) + "\0" + authCode;

        System.err.println( authCode );
        System.err.println( "Code:" + jidAndToken );
    }
}

祝你好运。