Coinbase 无效的 404 请求 OAuth2 Guzzle

Question

我尝试使用 OAuth2 在 coinbase 中进行授权：

        $client = new Client(['cookies' => true]);
        try {
            $response = $client->request('POST', $this->urlAccessToken, [
                'headers' => [
                    'cache-control' => 'no-cache',
                    'Content-Type' => 'application/x-www-form-urlencoded'
                ],
                'form_params' => [
                    'grant_type' => 'authorization_code',
                    'code' => $request->code,
                    'client_id' => $this->clientId,
                    'client_secret' => $this->clientSecret,
                    'redirect_uri' => $this->redirectUri
                ]
            ]);
            dd($response->getBody());
        } catch (\Exception $e) {
            return response($e->getMessage(), 400);
        }

在 coinbase 授权后，我重定向到重定向 URI，当发送请求交换代码时，我看到错误的响应：

客户端错误：POST http://www.coinbase.com/oauth/token 导致 404 Not Found 响应：无效请求。而不是 GET 请求，您应该使用有效的 POST 参数进行 POST。更多信息（截断...）

将在 Coinbase 中授权的所有代码：

private $clientId;
private $clientSecret;
private $redirectUri;
private $urlAuthorize;
private $urlAccessToken;

public function __construct()
{
    $this->clientId = env('COINBASE_CLIENT_ID');
    $this->clientSecret = env('COINBASE_CLIENT_SECRET');
    $this->redirectUri = route('oauth2-redirect');
    $this->urlAuthorize = 'https://www.coinbase.com/oauth/authorize';
    $this->urlAccessToken = 'http://www.coinbase.com/oauth/token';
}

public function oauth(Request $request)
{
    $state = hash('sha256', $request->session()->getId());

    if (!isset($request->code)) {
        $parameters = [
            'response_type' => 'code',
            'client_id' => $this->clientId,
            'redirect_uri' => $this->redirectUri,
            'state' => $state
        ];

        $authorizationUrl = $this->urlAuthorize . '?' . http_build_query($parameters);

        // Redirect the user to the authorization URL.
        header('Location: ' . $authorizationUrl);
        exit;
    } elseif (empty($request->state) || $request->state !== $state) {
        return response('Invalid state', 400);
    } else {
        $client = new Client(['cookies' => true]);
        try {
            $response = $client->request('POST', $this->urlAccessToken, [
                'headers' => [
                    'cache-control' => 'no-cache',
                    'Content-Type' => 'application/x-www-form-urlencoded'
                ],
                'form_params' => [
                    'grant_type' => 'authorization_code',
                    'code' => $request->code,
                    'client_id' => $this->clientId,
                    'client_secret' => $this->clientSecret,
                    'redirect_uri' => $this->redirectUri
                ]
            ]);
            dd($response->getBody());
        } catch (\Exception $e) {
            return response($e->getMessage(), 400);
        }

    }
}

我也在邮递员那里检查过，他回复很好： enter image description here

Answer 1

问题在于 URL 访问令牌，需要使用 https://api.coinbase.com/oauth/token 而不是 http://www.coinbase.com/oauth/token。