invalid oauth2 token request

Question

I'm developing a node application which needs to authenticate with google. When I request a token, https://accounts.google.com/o/oauth2/token responds with:

error: 400
{ 
  "error" : "invalid_request"
}

I've tried making the same request in curl, and have received the same error, so I suspect there is something wrong with my request but I can't figure out what. I've pasted my code below:

var request = require('request');
var token_request='code='+req['query']['code']+
                  '&client_id={client id}'+
                  '&client_secret={client secret}'+
                  '&redirect_uri=http%3A%2F%2Fmassiveboom.com:3000'+
                  '&grant_type=authorization_code';
request(
    { method: 'POST',
      uri:'https://accounts.google.com/o/oauth2/token',
      body: token_request
    },
    function (error, response, body) {
        if(response.statusCode == 201){
            console.log('document fetched');
            console.log(body);
        } else {
            console.log('error: '+ response.statusCode);
            console.log(body);
        }
    });

I've triple checked to make sure all the data I'm submitting is correct and i'm still getting the same error. What can I do to debug this further?

post here the final string generated from token_request var.that may have something wrong. — sudmong, Jun 04 '12 at 12:25

score 3 · Accepted Answer · answered Jun 05 '12 at 02:09

It turns out that request.js (https://github.com/mikeal/request) doesn't automatically include the content-length to the headers. I added it manually and it worked on the first try. I've pasted the code below:

exports.get_token = function(req,success,fail){
    var token;
    var request = require('request');
    var credentials = require('../config/credentials');
    var google_credentials=credentials.fetch('google');
    var token_request='code='+req['query']['code']+
        '&client_id='+google_credentials['client_id']+
        '&client_secret='+google_credentials['client_secret']+
        '&redirect_uri=http%3A%2F%2Fmyurl.com:3000%2Fauth'+
        '&grant_type=authorization_code';
    var request_length = token_request.length;
    console.log("requesting: "+token_request);
    request(
        { method: 'POST',
          headers: {'Content-length': request_length, 'Content-type':'application/x-www-form-urlencoded'},
          uri:'https://accounts.google.com/o/oauth2/token',
          body: token_request
        },
        function (error, response, body) {
            if(response.statusCode == 200){
                console.log('document fetched');
                token=body['access_token'];
                store_token(body);
                if(success){
                    success(token);
                }
            }
            else {
                console.log('error: '+ response.statusCode);
                console.log(body)
                if(fail){
                    fail();
                }
            }
        }
    );
}

that's was in `HTTP POST request in node.js` example as the second header :) — Artem Oboturov, Jun 05 '12 at 05:20
The POST example didn't work because it didn't send all of the headers google requires. — devnill, Jun 06 '12 at 06:50

score 1 · Answer 2 · edited May 23 '17 at 12:20

1

from here How to make an HTTP POST request in node.js? you could use querystring.stringify to escape query string of request parameters. Plus you'd better add 'Content-Type': 'application/x-www-form-urlencoded' for POST request.

edited May 23 '17 at 12:20

Community

1
1

answered Jun 04 '12 at 13:23

Artem Oboturov

4,344
2
30
48

I tried using require to submit it as a form to add that as the default content type and it still failed. – devnill Jun 05 '12 at 01:08

score 0 · Answer 3 · answered Jun 04 '12 at 12:26

0

post here the final string generated from token_request var.that may have something wrong. or may be authentication code is expired or not added correctly to the URL. Usually code has '/' in it that needs to escaped.

answered Jun 04 '12 at 12:26

sudmong

2,036
13
12

invalid oauth2 token request

3 Answers3