從谷歌應用引擎檢查鉻網絡商店用戶許可證

是否有可能使用client-side generated access token在server-side call chromewebstore/v1.1/userlicenses /來檢查用戶許可證？擴展程序和應用程序引擎項目都註冊在同一個Gmail帳戶上。我想知道我的web應用程序的用戶是否已經購買了我的擴展程序。從谷歌應用引擎檢查鉻網絡商店用戶許可證

gapi.auth.authorize({ 
scope: [ 
"https://www.googleapis.com/auth/plus.me", 
"https://www.googleapis.com/auth/plus.login", 
"https://www.googleapis.com/auth/userinfo.email", 
"https://www.googleapis.com/auth/chromewebstore.readonly"].join(" "), 
client_id: "xxxxx" 
},() => gapi.client.myapi.check_payment().execute())

App Engine的代碼

import os 
import urllib 
import endpoints 
import httplib2 
from oauth2client import client 
from protorpc import remote 
from protorpc.message_types import VoidMessage 

EXTENSION_ID = "xxxxx" # my extension id from Chrome Web Store Developer Dashboard 
API_KEY = "xxxxx" # api key from Google APIs Console 
CLIENT_ID = "xxxxx" # OAuth 2.0 client ID from Google APIs Console 
SCOPES = [endpoints.EMAIL_SCOPE] 


@endpoints.api(name="myapi", version="v1", allowed_client_ids=[CLIENT_ID], scopes=SCOPES) 
class MyApi(remote.Service): 

    @endpoints.method(VoidMessage, VoidMessage) 
    def check_payment(self, msg): 
     user = endpoints.get_current_user() 
     assert user is not None 
     if "HTTP_AUTHORIZATION" in os.environ: 
      (tokentype, token) = os.environ["HTTP_AUTHORIZATION"].split(" ") 
      credentials = client.AccessTokenCredentials(token, 'my-user-agent/1.0') 
      http = credentials.authorize(httplib2.Http()) 
      params = urllib.urlencode({"key": API_KEY}) 
      url = "https://www.googleapis.com/chromewebstore/v1.1/userlicenses/%s?%s" % (EXTENSION_ID, params) 
      response = http.request(url)

迴應與403種狀態：{ 「域」：「全局」，「原因」：「禁止」，「消息」：「你不\'噸有訪問許可數據的應用程序ID：xxxxx「}

來源

2016-12-01 AndrewSokolowski

所以是的，這是沒有辦法的工作，這種請求只能通過身份驗證令牌minified由identity.getAuthToken。

來源

2016-12-03 13:46:43 AndrewSokolowski

從谷歌應用引擎檢查鉻網絡商店用戶許可證

回答

相關問題