Google Calendar API v3 - 使用硬编码凭据进行身份验证

1. Under the Google Api Console go to API Access
2. Generate a new Client ID and choose Installed Application ( as you will be authenticating you server as you not as your user)
3. Either using a console app or a one off PHP page authenticate using OAuth and your google account (the one with the calendar you want access to)
4. In the return from the authentication there should be a renew token, (called renew or refresh or something similar). Save this string and make it available to your PHP site.
5. When you need to access the service your OAuth library should have a renew/refresh call. There is an example using .Net below.

<小时>

private IAuthorizationState CreateAuthorization(NativeApplicationClient arg)
 {
   // Get the auth URL:
   IAuthorizationState state = new AuthorizationState(new[] { AdsenseService.Scopes.AdsenseReadonly.GetStringValue() });
   state.Callback = new Uri(NativeApplicationClient.OutOfBandCallbackUrl);
   if (refreshToken.IsNotNullOrEmpty()) // refreshToken you stored in step 4
   {
     try
     {
       state.RefreshToken = refreshToken;
       if (arg.RefreshToken(state))     // This is calling out to the OAuth servers with the refresh token getting back a session token, returns true if successful.
       {
         if (state.RefreshToken != refreshToken) // if the refresh token has changed, save it.
         {
           PersistRefreshToken(authorization.RefreshToken);
         }
         return this.authorization = state; // Retain the authorization state, this is what will authenticate your calls.
       }
     }
     catch (ProtocolException ex) {...}

现在已更新的 AuthorisationState 然后可用于验证您对 API 的调用.这个状态可以使用很多次，直到它过期，然后可以刷新.当您以您自己而不是用户身份验证您的应用程序时，此 AuthorisationState 可以由您的所有会话共享.当前的 AuthorisationState 和刷新令牌都应该安全地保存在您的服务器上，并且永远不会发送到客户端，如果您将它们作为响应的一部分发送，您的客户端将拥有与您的代码应用程序相同的权限