ssl - 谷歌登录网络应用程序但在身份验证中它给出了 SSL 异常错误

Question

我正在我的网络应用程序上开发谷歌登录。我已经在我的服务器上发送了 ID token ，然后我想验证 token 的完整性，但在身份验证中它在 GoogleIdTokenVerifier 中给出了 SSL 异常错误。我该如何解决它？

public class VerifyController {
         public static final String CLIENT_ID = "";
         private static final String APPLICATION_NAME = "";
         public static GoogleIdTokenVerifier verifier ;
         public static GoogleIdToken token;
         private static NetHttpTransport transport;
         private static JsonFactory mJFactory;

        public Result validate(@PathParam("id") String idtoken) {
            try{
            // TODO Auto-generated method stub
            System.out.println("IN validate");
            System.out.println(idtoken);
            transport = new NetHttpTransport();
            mJFactory = new GsonFactory();
            verifier = new GoogleIdTokenVerifier.Builder(transport, mJFactory)
                    .setAudience(Arrays.asList(CLIENT_ID))
                    .build();
            token = GoogleIdToken.parse(mJFactory, idtoken);
             GoogleIdToken token = GoogleIdToken.parse(mJFactory, idtoken);
                if (verifier.verify(token)) {
                  Payload payload = token.getPayload();
                  System.out.println(payload);
                  if (payload.getHostedDomain().equals(APPLICATION_NAME)
                      // If multiple clients access the backend server:
                       {
                    System.out.println("User ID: " + payload.getSubject());
                  } else {
                    System.out.println("Invalid Domain.");
                  }
                } else {
                  System.out.println("null ID token.");
                }
                return null;
            }catch(Exception e) {
                e.printStackTrace();
            }
            return null;
        }
    }

Answer 1

创建 GoogleIdTokenVerifier 对象时需要设置 Issuer

verifier = new GoogleIdTokenVerifier.Builder(transport, mJFactory)
                .setAudience(Arrays.asList(CLIENT_ID))
                .build(); //instead of this use below code

verifier = new GoogleIdTokenVerifier.Builder(transport, mJFactory)
                .setAudience(Arrays.asList(CLIENT_ID))
                .setIssuer("accounts.google.com")
                .build();