Java AppIdentityService类代码示例

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
private byte[] sign(byte[] data) {
    byte[] signature;
    if (Environment.is(Environment.DEV)) {
        try {
            Signature rsa = Signature.getInstance("SHA256withRSA");
            rsa.initSign(gcsCredential.getServiceAccountPrivateKey());
            rsa.update(data);
            signature = rsa.sign();
        } catch (Exception e) {
            throw new GoogleCloudStorageException(e, "Error signing URL: %s", e.getMessage());
        }
    } else {
        AppIdentityService.SigningResult signingResult = appIdentityService.signForApp(data);
        signature = signingResult.getSignature();
    }
    return signature;
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
/**
 * Create a secure JWT token for the given userId.
 */
public String createFirebaseToken(Game game, String userId) {
  final AppIdentityService appIdentity = AppIdentityServiceFactory.getAppIdentityService();
  final BaseEncoding base64 = BaseEncoding.base64();

  String header = base64.encode("{\"typ\":\"JWT\",\"alg\":\"RS256\"}".getBytes());

  // Construct the claim
  String channelKey = game.getChannelKey(userId);
  String clientEmail = appIdentity.getServiceAccountName();
  long epochTime = System.currentTimeMillis() / 1000;
  long expire = epochTime + 60 * 60; // an hour from now

  Map<String, Object> claims = new HashMap<String, Object>();
  claims.put("iss", clientEmail);
  claims.put("sub", clientEmail);
  claims.put("aud", IDENTITY_ENDPOINT);
  claims.put("uid", channelKey);
  claims.put("iat", epochTime);
  claims.put("exp", expire);

  String payload = base64.encode(new Gson().toJson(claims).getBytes());
  String toSign = String.format("%s.%s", header, payload);
  AppIdentityService.SigningResult result = appIdentity.signForApp(toSign.getBytes());
  return String.format("%s.%s", toSign, base64.encode(result.getSignature()));
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
@Test
public void testGetAccessTokenWithScope() {
    Date beforeRequest = new Date();
    List<String> scopes = new ArrayList<>();
    scopes.add("https://www.googleapis.com/auth/urlshortener");
    AppIdentityService.GetAccessTokenResult tokenResult = appIdentity.getAccessToken(scopes);

    Assert.assertNotNull(tokenResult);
    Assert.assertTrue("Token should not be blank.", !tokenResult.getAccessToken().isEmpty());

    String errMsg = "Expiration time should at least be after request time. " +
        dateDebugStr("Before-Request", beforeRequest) + ", " + dateDebugStr("Expiration-Time=", tokenResult.getExpirationTime());
    Assert.assertTrue(errMsg, beforeRequest.getTime() < tokenResult.getExpirationTime().getTime());
    log.info("AccessToken: " + tokenResult.getAccessToken() +
        " Expiration: " + tokenResult.getExpirationTime());

    // Retrieve it again, should be same since it grabs it from a cache.
    AppIdentityService.GetAccessTokenResult tokenResult2 = appIdentity.getAccessToken(scopes);

    Assert.assertEquals(tokenResult.getAccessToken(), tokenResult2.getAccessToken());
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
@Test
public void testGetAccessTokenUncached() {
    Date beforeRequest = new Date();
    List<String> scopes = new ArrayList<>();
    scopes.add("https://www.googleapis.com/auth/urlshortener");

    // Although we do not verify whether the result came from the cache or not,
    // the token should at least be valid.
    AppIdentityService.GetAccessTokenResult tokenResult = appIdentity.getAccessTokenUncached(scopes);

    Assert.assertNotNull(tokenResult);
    Assert.assertTrue("Token should not be blank.", !tokenResult.getAccessToken().isEmpty());

    String errMsg = "Expiration time should at least be after request time. " +
        dateDebugStr("Before-Request", beforeRequest) + ", " + dateDebugStr("Expiration-Time=", tokenResult.getExpirationTime());
    Assert.assertTrue(errMsg, beforeRequest.getTime() < tokenResult.getExpirationTime().getTime());
    log.info("AccessToken: " + tokenResult.getAccessToken() +
        " Expiration: " + tokenResult.getExpirationTime());
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
@Test
/**
 * Verify that all certificates returned will validate signForApp().  Any invalid signature or
 * exception will cause the test to fail.
 */
public void testSignForApp() throws Exception {
    Collection<PublicCertificate> certs = appIdentity.getPublicCertificatesForApp();
    byte[] blob = "abcdefg".getBytes();
    AppIdentityService.SigningResult result = appIdentity.signForApp(blob);
    byte[] signedBlob = result.getSignature();
    boolean res = verifySignatureWithAllCertsForApp(blob, signedBlob, certs);

    // assertTrue(res) returns null, so using assertEquals()
    Assert.assertEquals("signature.verify() returned false. See logs.", true, res);
    Assert.assertTrue(!result.getKeyName().isEmpty());
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
public GoogleCloudStorageJsonApiClient(HttpRequestFactory httpRequestFactory,
    AppIdentityService appIdentityService,
    GoogleCredential gcsCredential) {
    this.httpRequestFactory = httpRequestFactory;
    this.appIdentityService = appIdentityService;
    this.gcsCredential = gcsCredential;
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
/**
 * Returns a shortened URL by calling the Google URL Shortener API.
 *
 * <p>Note: Error handling elided for simplicity.
 */
public String createShortUrl(String longUrl) throws Exception {
  ArrayList<String> scopes = new ArrayList<String>();
  scopes.add("https://www.googleapis.com/auth/urlshortener");
  final AppIdentityService appIdentity = AppIdentityServiceFactory.getAppIdentityService();
  final AppIdentityService.GetAccessTokenResult accessToken = appIdentity.getAccessToken(scopes);
  // The token asserts the identity reported by appIdentity.getServiceAccountName()
  JSONObject request = new JSONObject();
  request.put("longUrl", longUrl);

  URL url = new URL("https://www.googleapis.com/urlshortener/v1/url?pp=1");
  HttpURLConnection connection = (HttpURLConnection) url.openConnection();
  connection.setDoOutput(true);
  connection.setRequestMethod("POST");
  connection.addRequestProperty("Content-Type", "application/json");
  connection.addRequestProperty("Authorization", "Bearer " + accessToken.getAccessToken());

  OutputStreamWriter writer = new OutputStreamWriter(connection.getOutputStream());
  request.write(writer);
  writer.close();

  if (connection.getResponseCode() == HttpURLConnection.HTTP_OK) {
    // Note: Should check the content-encoding.
    //       Any JSON parser can be used; this one is used for illustrative purposes.
    JSONTokener responseTokens = new JSONTokener(connection.getInputStream());
    JSONObject response = new JSONObject(responseTokens);
    return (String) response.get("id");
  } else {
    try (InputStream s = connection.getErrorStream();
        InputStreamReader r = new InputStreamReader(s, StandardCharsets.UTF_8)) {
      throw new RuntimeException(String.format(
          "got error (%d) response %s from %s",
          connection.getResponseCode(),
          CharStreams.toString(r),
          connection.toString()));
    }
  }
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
/**
 * Returns a shortened URL by calling the Google URL Shortener API.
 *
 * <p>Note: Error handling elided for simplicity.
 */
public String createShortUrl(String longUrl) throws Exception {
  ArrayList<String> scopes = new ArrayList<String>();
  scopes.add("https://www.googleapis.com/auth/urlshortener");
  final AppIdentityService appIdentity = AppIdentityServiceFactory.getAppIdentityService();
  final AppIdentityService.GetAccessTokenResult accessToken = appIdentity.getAccessToken(scopes);
  // The token asserts the identity reported by appIdentity.getServiceAccountName()
  JSONObject request = new JSONObject();
  request.put("longUrl", longUrl);

  URL url = new URL("https://www.googleapis.com/urlshortener/v1/url?pp=1");
  HttpURLConnection connection = (HttpURLConnection) url.openConnection();
  connection.setDoOutput(true);
  connection.setRequestMethod("POST");
  connection.addRequestProperty("Content-Type", "application/json");
  connection.addRequestProperty("Authorization", "Bearer " + accessToken.getAccessToken());

  OutputStreamWriter writer = new OutputStreamWriter(connection.getOutputStream());
  request.write(writer);
  writer.close();

  if (connection.getResponseCode() == HttpURLConnection.HTTP_OK) {
    // Note: Should check the content-encoding.
    //       Any JSON parser can be used; this one is used for illustrative purposes.
    JSONTokener responseTokens = new JSONTokener(connection.getInputStream());
    JSONObject response = new JSONObject(responseTokens);
    return (String) response.get("id");
  } else {
    try (InputStream s = connection.getErrorStream();
        InputStreamReader r = new InputStreamReader(s, StandardCharsets.UTF_8)) {
      throw new RuntimeException(
          String.format(
              "got error (%d) response %s from %s",
              connection.getResponseCode(), CharStreams.toString(r), connection.toString()));
    }
  }
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
/**
 * Returns the project ID.
 *
 * @return the project ID.
 */
public static String getProjectId() {
    AppIdentityService identityService =
            AppIdentityServiceFactory.getAppIdentityService();

    // The project ID associated to an app engine application is the same
    // as the app ID.
    return identityService.parseFullAppId(ApiProxy.getCurrentEnvironment()
            .getAppId()).getId();
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
@Test
public void testParseFullAppId() {
    // [(partition)~][(domain):](display-app-id)
    ApiProxy.Environment env = ApiProxy.getCurrentEnvironment();
    String hostname = (String) env.getAttributes().get("com.google.appengine.runtime.default_version_hostname");
    AppIdentityService.ParsedAppId parsed = appIdentity.parseFullAppId(hostname);

    String message = createParsed(parsed);
    Assert.assertEquals(message, property("testParseFullAppId_partition").getPropertyValue(), parsed.getPartition());
    Assert.assertEquals(message, getExpectedAppHostname("testParseFullAppId_domain"), parsed.getDomain());
    Assert.assertEquals(message, getExpectedAppId("testParseFullAppId_id"), parsed.getId());
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
public CloudFileManager() {
  AppIdentityService appIdentityService = AppIdentityServiceFactory.getAppIdentityService();
  defaultBucket = appIdentityService.getDefaultGcsBucketName();
  productionManifestFile = new GcsFilename(defaultBucket, Config.MANIFEST_NAME);
  stagingManifestFile = new GcsFilename(defaultBucket, Config.MANIFEST_NAME_STAGING);
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
private byte[] signBlob(byte[] blob) {
  AppIdentityService.SigningResult result = appIdentity.signForApp(blob);
  return result.getSignature();
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
private String createParsed(AppIdentityService.ParsedAppId parsed) {
    return parsed.getDomain() + " : " + parsed.getId() + " : " + parsed.getPartition();
}
 

import com.google.appengine.api.appidentity.AppIdentityService; //导入依赖的package包/类
/**
 * Get the access token for a list of scopes.
 *
 * @param scopes the scopes to get the access tokens for.
 * @return the access token.
 */
public static String getAccessToken(List<String> scopes) {
  final AppIdentityService appIdService = AppIdentityServiceFactory.getAppIdentityService();
  AppIdentityService.GetAccessTokenResult result = appIdService.getAccessToken(scopes);
  return result.getAccessToken();
}