Eric,
Here's my complete statement:

String requestUrl =
AuthSubUtil.getRequestUrl("testfacultyu.northwestern.edu",
"http://gint.at.northwestern.edu/samltool/GintShareHelperServlet";,
"http://docs.google.com/feeds";, true, true);


Actually, at run time, my program appends a few http parameters to the
'gint' url before calling the AuthSubUtil.getRequestUrl() method (at least 3
parameters in fact, which tell it which page to display next, and what is
the original http request about). So the url above can become
url?collabID=<some id>&... Etc.

Please note that the same thing was true when I was using unsecure tokens
instead (the first boolean flag above was false), and I had no trouble
whatsoever. 

Any suggestions?
-Patricia



> -----Original Message-----
> From: [email protected] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Eric (Google)
> Sent: Monday, November 24, 2008 3:23 PM
> To: Google Docs Data APIs
> Subject: Re: AuthSub not working well with secure tokens?
> 
> 
> Hmmm, what's the full URL from the AuthSubRequest page?
> 
> Eric
> 
> On Nov 24, 11:31 am, "Patricia Goldweic" <[EMAIL PROTECTED]>
> wrote:
> > Hi Eric,
> > Thanks for replying. I actually did the call to 
> getRequestUrl in the 
> > way you suggested, with both parameters set to true. I just never 
> > heard back from Google :-( about this request, which is the 
> reason for 
> > this post (in other words, AuthSubUtil does not seem to be properly 
> > processing my request, and does not redirect back to my 
> application as expected.
> >
> > -Patricia
> >
> > > -----Original Message-----
> > > From: [email protected]
> > > [mailto:[EMAIL PROTECTED] On Behalf Of Eric 
> > > (Google)
> > > Sent: Monday, November 24, 2008 1:21 PM
> > > To: Google Docs Data APIs
> > > Subject: Re: AuthSub not working well with secure tokens?
> >
> > > Hi Patricia,
> >
> > > The Base API group you mentioned is for the Base Data API:
> > >http://code.google.com/apis/base/
> >
> > > The best place to post for Auth issues is in that group:
> > >http://groups.google.com/group/Google-Accounts-API/topics
> >
> > > That being said, I also monitor the Accounts forum :) If you're 
> > > using secure AuthSub, you need to request a token with
> > > secure=1:
> >
> > > boolean secure = true
> > > boolean sesssion = true
> > > String requestUrl =
> > >   
> AuthSubUtil.getRequestUrl("http://www.example.com/RetrieveToken";,
> > >                             "http://docs.google.com/feeds/";,
> > >                             secure ,
> > >                             sesssion );
> >
> > > and on subsequent requests (even the token upgrade), use 
> your  RSA 
> > >private key for signing:
> > 
> >http://code.google.com/apis/gdata/authsub.html#request-session-token
> >
> > > java.security.PrivateKey privateKey =
> > >   AuthSubUtil.getPrivateKeyFromKeystore("AuthSubExample.jks",
> > > "changeme",
> > >                                         "AuthSubExample", 
> > > "changeme"); String sessionToken = 
> > > AuthSubUtil.exchangeForSessionToken
> > > (onetimeUseToken,
> > >                                                           
> > > privateKey);
> >
> > > Information on how to create a key using Java keytool:
> > >http://code.google.com/apis/gdata/authsub.html#Registered
> >
> > > And upload the public certificate to ManageDomain as 
> described here:
> > >http://code.google.com/apis/accounts/docs/RegistrationForWebAp
> > > psAuto.html
> >
> > > Cheers,
> > > Eric
> >
> > > On Nov 24, 10:44 am, "Patricia Goldweic" 
> > > <[EMAIL PROTECTED]>
> > > wrote:
> > > > I have just posted this email to the google Base Data apis
> > > group, but
> > > > I wonder if anybody in this group may have a suggestion.
> > > > Thanks in advance,
> > > > -Patricia
> >
> > > > > -----Original Message-----
> > > > > From: [EMAIL PROTECTED]
> > > > > [mailto:[EMAIL PROTECTED] On Behalf Of 
> > > > > patriciaG
> > > > > Sent: Monday, November 24, 2008 12:33 PM
> > > > > To: Google Base Data API
> > > > > Subject: [Google-Base-API] AuthSub not working well 
> with secure 
> > > > > tokens?
> >
> > > > > I've recently started experimenting with AuthSub to
> > > programmatically
> > > > > update the sharing permissions over individual Google 
> docs. This 
> > > > > seemed to be working fine when I was using unsecure
> > > tokens that were
> > > > > eventually exchanged for a session token (I'm using the
> > > Java client
> > > > > library for this).
> > > > > However, when I tried switching to requesting a secure token 
> > > > > from Google, I stopped getting the redirects from Google with 
> > > > > the one time token.
> > > > > In other words, when I make the call:
> >
> > > > > String requestUrl =
> > > > >  
> > > AuthSubUtil.getRequestUrl("http://www.mydomain.com/RetrieveToken";,
> > > > >                            
> > > "http://www.google.com/calendar/feeds/";,
> > > > >                             false,
> > > > >                             true);
> >
> > > > > The url in my application: 
> "http://www.mydomain.com/RetrieveToken";
> > > > > DOES NOT GAIN CONTROL of the http request process, 
> and so I can 
> > > > > neither retrieve the one time token, nor do anything else at 
> > > > > that point (no Java exceptions or error messages are 
> generated 
> > > > > by Google).
> >
> > > > > Can somebody suggest what the problem is here, and how
> > > can I resolve
> > > > > it?
> > > > > Thanks in advance,
> > > > > -Patricia
> > 



--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Docs Data APIs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/Google-Docs-Data-APIs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to