在下面的代码中，“测试”按钮触发调用外部端点加载数据的函数。但是，单击该按钮时没有任何反应，我在控制台区域收到 400 错误，提示 Invalid Argument。

代码.gs

function buildAddOn(e) {
  // Create a section for that contains all user Labels.
  var section = CardService.newCardSection()  
  var action = CardService.newAction()
        .setFunctionName("testCall");

  var button = CardService.newTextButton().setText('Test').setOnClickAction(action);
  section.addWidget(CardService.newButtonSet().addButton(button)); 

//  section.addWidget(CardService.newTextParagraph()
//    .setText("This is a text paragraph widget. Multiple lines are allowed if needed.");)

  // Build the main card after adding the section.
  var card = CardService.newCardBuilder()
    .setHeader(CardService.newCardHeader()
    .setTitle('Authentication Card')
    .setImageUrl('https://www.gstatic.com/images/icons/material/system/1x/label_googblue_48dp.png'))
    .addSection(section)
    .build();

  return [card];
}

function testCall(){
  console.log("test");
  var data = accessProtectedResource('https://api.ssdf.io/v1.0/asd/4/174203','get');
  return CardService.newActionResponseBuilder()
      .setNotification(CardService.newNotification()
          .setType(CardService.NotificationType.INFO)
          .setText(data))
      .build();
}

authService.gs

/**
 * Attempts to access a non-Google API using a constructed service
 * object.
 *
 * If your add-on needs access to non-Google APIs that require OAuth,
 * you need to implement this method. You can use the OAuth1 and
 * OAuth2 Apps Script libraries to help implement it.
 *
 * @param {String} url         The URL to access.
 * @param {String} method_opt  The HTTP method. Defaults to GET.
 * @param {Object} headers_opt The HTTP headers. Defaults to an empty
 *                             object. The Authorization field is added
 *                             to the headers in this method.
 * @return {HttpResponse} the result from the UrlFetchApp.fetch() call.
 */
function accessProtectedResource(url, method_opt, headers_opt) {
  var service = getOAuthService();
  var maybeAuthorized = service.hasAccess();
  if (maybeAuthorized) {
    // A token is present, but it may be expired or invalid. Make a
    // request and check the response code to be sure.

    // Make the UrlFetch request and return the result.
    var accessToken = service.getAccessToken();
    var method = method_opt || 'get';
    var headers = headers_opt || {};
    headers['Authorization'] =
        Utilities.formatString('Bearer %s', accessToken);
    var resp = UrlFetchApp.fetch(url, {
      'headers': headers,
      'method' : method,
      'muteHttpExceptions': true, // Prevents thrown HTTP exceptions.
    });

    var code = resp.getResponseCode();
    if (code >= 200 && code < 300) {
      return resp.getContentText("utf-8"); // Success
    } else if (code == 401 || code == 403) {
       // Not fully authorized for this action.
       maybeAuthorized = false;
    } else {
       // Handle other response codes by logging them and throwing an
       // exception.
       console.error("Backend server error (%s): %s", code.toString(),
                     resp.getContentText("utf-8"));
       throw ("Backend server error: " + code);
    }
  }

  if (!maybeAuthorized) {
    // Invoke the authorization flow using the default authorization
    // prompt card.
    CardService.newAuthorizationException()
        .setAuthorizationUrl(service.getAuthorizationUrl())
        .setResourceDisplayName("Login to ....")
        .throwException();
  }
}

/**
 * Create a new OAuth service to facilitate accessing an API.
 * This example assumes there is a single service that the add-on needs to
 * access. Its name is used when persisting the authorized token, so ensure
 * it is unique within the scope of the property store. You must set the
 * client secret and client ID, which are obtained when registering your
 * add-on with the API.
 *
 * See the Apps Script OAuth2 Library documentation for more
 * information:
 *   https://github.com/googlesamples/apps-script-oauth2#1-create-the-oauth2-service
 *
 *  @return A configured OAuth2 service object.
 */
function getOAuthService() {
  return OAuth2.createService('auth')
      .setAuthorizationBaseUrl('https://app.ss.io/oauth/authorize')
      .setTokenUrl('https://api.ss.io/oauth/token')
      .setClientId('2361c9fbc5ba4b88813a3ef')
      .setClientSecret('f5d3a04f4asda30a52830e230e43727')
      .setScope('1')
      .setCallbackFunction('authCallback')
      .setCache(CacheService.getUserCache())
      .setPropertyStore(PropertiesService.getUserProperties());
}

/**
 * Boilerplate code to determine if a request is authorized and returns
 * a corresponding HTML message. When the user completes the OAuth2 flow
 * on the service provider's website, this function is invoked from the
 * service. In order for authorization to succeed you must make sure that
 * the service knows how to call this function by setting the correct
 * redirect URL.
 *
 * The redirect URL to enter is:
 * https://script.google.com/macros/d/<Apps Script ID>/usercallback
 *
 * See the Apps Script OAuth2 Library documentation for more
 * information:
 *   https://github.com/googlesamples/apps-script-oauth2#1-create-the-oauth2-service
 *
 *  @param {Object} callbackRequest The request data received from the
 *                  callback function. Pass it to the service's
 *                  handleCallback() method to complete the
 *                  authorization process.
 *  @return {HtmlOutput} a success or denied HTML message to display to
 *          the user. Also sets a timer to close the window
 *          automatically.
 */
function authCallback(callbackRequest) {
  var authorized = getOAuthService().handleCallback(callbackRequest);
  if (authorized) {
    return HtmlService.createHtmlOutput(
      'Success! <script>setTimeout(function() { top.window.close() }, 1);</script>');
  } else {
    return HtmlService.createHtmlOutput('Denied');
  }
}

/**
 * Unauthorizes the non-Google service. This is useful for OAuth
 * development/testing.  Run this method (Run > resetOAuth in the script
 * editor) to reset OAuth to re-prompt the user for OAuth.
 */
function resetOAuth() {
  getOAuthService().reset();
}

最佳答案

getOAuthService() 函数中的所有 URL 都必须是示例的原始 google-URL:

      // Set the endpoint URLs, which are the same for all Google services.
      .setAuthorizationBaseUrl('https://accounts.google.com/o/oauth2/auth')
      .setTokenUrl('https://accounts.google.com/o/oauth2/token')

和

      // Set the scopes to request (space-separated for Google services).
      .setScope('https://www.googleapis.com/auth/drive')

也许可以更改后一个，但只能更改路径，不能更改域，并且您必须查看 API 是否可以调整以及如何调整。此范围参数在您的示例中也有所不同，但我不知道是否可以接受“1”。

如果授予访问权限但不参与验证身份验证，您自己的应用程序将获得反馈。因此，您还需要获取访问 token ，我在您的代码中看到了它:var accessToken = service.getAccessToken();，在示例中它看起来有点不同:

function makeRequest() {
  var driveService = getDriveService();
  var response = UrlFetchApp.fetch('https://www.googleapis.com/drive/v2/files?maxResults=10', {
    headers: {
      Authorization: 'Bearer ' + driveService.getAccessToken()
    }
  });
  // ...
}

查看带有 Authorization: 'Bearer ' + driveService.getAccessToken() 的行。

您自己的服务器没有(也不应该)配置为处理身份验证请求，因此抛出 400 error .该 API 是为客户端的 Javascript 使用而构建的，因此我建议不要使用它在自己的服务器上进行身份验证。尽管如此，我在下面列出了供您自己的服务器使用的 API。

使用您自己的服务器进行身份验证
如果您不理会我使用 google-servers 进行身份验证的建议，那么标记问题的范围会越来越大，因为服务器配置(apache、nginx、...)和服务器端编程语言(PHP、Python、 ...) 可能涉及。

然后您必须调试 header ，到底发送到服务器的是什么以及服务器无法处理它的原因。您可以在浏览器的开发工具(网络面板)中调试请求和响应，并查看服务器的错误文件。

如果您遵循 example you linked in your code，服务器必须自行获取 google-service 并执行仅由 javascript 在前端完成的操作。 .

示例中有三个服务器请求:
- 一个用于验证
- 一个获取身份验证 token
- 一个获得 protected 服务
您必须记住，所有三个步骤都必须由您自己的服务器完成，并且您的服务器必须能够响应所有三种请求类型。
一个重要的问题可能是三个请求中的哪一个产生了错误？

然后，您应该使用发现的有关与服务器通信的详细问题来扩展您的问题。

服务器端 OAuth 认证的 API 和示例
PHP: https://developers.google.com/api-client-library/php/auth/web-app
python :https://developers.google.com/api-client-library/python/auth/web-app
ruby :https://developers.google.com/api-client-library/ruby/auth/web-app
节点:https://developers.google.com/apps-script/api/quickstart/nodejs
java :https://developers.google.com/api-client-library/java/google-oauth-java-client/
去:https://github.com/googleapis/google-api-go-client
.NET:https://developers.google.com/api-client-library/dotnet/apis/oauth2/v2

关于javascript - Gmail 插件 : Oauth not being triggered，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/55395868/