Question

我試圖找到一種方法，一旦使用OAuth授權但有問題，就可以與Twitter API保持連接。

當使用會話或數據庫中保存的Oauth令牌嘗試連接到Twitter API時，我得到"Invalid/expired Token"。

有沒有辦法做到這一點？我不希望我的應用程序的用戶每次都必須通過Twitter登錄。當然，一旦他們授權我的應用程序一次，這應該夠了？

$consumer_key = 'consumerkey'; 
$consumer_secret = 'consumersecret'; 

$twitterObj = new EpiTwitter($consumer_key, $consumer_secret); 

if (isset($_GET['oauth_token'])){ 
    $oauth_token = $_GET['oauth_token']; 
} else if ($_SESSION['oauth_token']){ 
    $oauth_token = $_SESSION['oauth_token']; 

    echo $_SESSION['oauth_token']; 
} else { 
    //see if authorisation already set up in DB 
    $query = mysql_query("SELECT oauth_token FROM PingSocialMediaUsers WHERE oauth_provider = 'twitter' AND clientID = '$clientID'"); 
    $result = mysql_fetch_row($query); 
    $oauth_token = $result[0]; 
} 

if($oauth_token == ''){ 
    $url = $twitterObj->getAuthorizationUrl(); 
    $twitter_login = $url; 
} else { 
    $twitterObj->setToken($oauth_token); 
    $token = $twitterObj->getAccessToken(); 
    $twitterObj->setToken($token->oauth_token, $token->oauth_token_secret);  
    $_SESSION['oauth_token'] = $token->oauth_token; 
    $_SESSION['oauth_secret'] = $token->oauth_token_secret; 
    $twitterInfo= $twitterObj->get_accountVerify_credentials(); 
    $twitterInfo->response; 

    echo $twitterInfo->response['error']; 
    //echo '<pre>'; 
    //print_r($twitterInfo); 
    $id = $twitterInfo->id; 
    $username = $twitterInfo->screen_name; 

    //add to details database 
    //find the user by ID 
    if ($id != ''){ 
     $query = mysql_query("SELECT * FROM PingSocialMediaUsers WHERE oauth_provider = 'twitter' AND oauth_uid = '$id'"); 
     $result = mysql_fetch_array($query); 

     // If does not exist add to database 
     if(empty($result)){ 
      $query = mysql_query("INSERT INTO PingSocialMediaUsers (oauth_provider, oauth_uid, username, oauth_token, oauth_secret) VALUES ('twitter', {$id}, '{$username}', '{$_SESSION['oauth_token']}', '{$_SESSION['oauth_secret']}')"); 
      $query = mysql_query("SELECT * FROM PingSocialMediaUsers WHERE id = " . mysql_insert_id()); 
      $result = mysql_fetch_array($query); 
     } else { 
      //update the tokens 
      $query = mysql_query("UPDATE PingSocialMediaUsers SET oauth_token = '{$_SESSION['oauth_token']}', oauth_secret = '{$_SESSION['oauth_secret']}' WHERE oauth_provider = 'twitter' AND oauth_uid = {$id}"); 
     } 

     $_SESSION['id'] = $result['id']; 
     $_SESSION['username'] = $result['username']; 
     $_SESSION['oauth_uid'] = $result['oauth_uid']; 
     $_SESSION['oauth_provider'] = $result['oauth_provider']; 
     $_SESSION['oauth_token'] = $result['oauth_token']; 
     $_SESSION['oauth_secret'] = $result['oauth_secret'];  
    } 

    $twitterAuth = TRUE;  
} 

Answer 1

我相信你在談論access_token你會從Twitter的OAuth的握手之後，你可以去訪問用戶代表有服務的最後一部分得到。

這裏是他們在說什麼在那裏的官方開發者頁面

We do not currently expire access tokens. 
Your access token will be invalid if a user explicitly 
rejects your application from their settings or if a Twitter admin suspends 
your application. If your application is suspended there will be 
a note on your application page saying that it has been suspended. 

所以，你可以在令牌非常好存儲在數據庫中，並可以在後面的階段總是使用。

這裏是參照有API頁面 Twitter OAuth FAQ

所以我建議你要確保你沒有改變任何應用程序設置，並正在從會話/數據庫