Google AuthSub Authentication + jQuery + Ajax

[Marknut]

I've been trying to get Google's AuthSub authentication to work for me, but to no avail. I can get the token (see below) but I cannot use the token in any way.

-To get the token, the user clicks a link where href="https://www.google.com/accounts/AuthSubRequest?next=http%3A%2F%2Fdev.MyTestSite.co m%2F&scope=https%3A%2F%2Fgdata.youtube.com&session =1&secure=0"

That redirects correctly with a token (which has more characters than any of their examples).

-HERE'S THE ISSUE: To turn the single use token into a session token, I've tried this:

$.ajax({
           url: "https://www.google.com/accounts/AuthSubSessionToken"
        ,headers: {     
            "Host": "www.google.com"
            ,"Content-Type": "application/x-www-form-urlencoded"
            ,"Authorization": authSub
            ,"User-Agent": "Java/1.5.0_06"
            ,"Accept": "text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2"
            ,"Connection": "keep-alive"}
        ,success: 
            function(data) {
                alert('Data Loaded: ' + data);}
        ,type: 'GET'
        ,dataType: "jsonp"
        ,crossDomain: true
        });
 

This is returning a 401 Unauthorized error. When I look at the request in firebug, I don't see the correct request headers. Is there something that I'm doing wrong?

[Marknut]

I just wanted to share the solution to my problem. I still couldn't get AJAX to work for this GET method, so I used cURL in PHP:

To upgrade the token to a session token:

    function sendGetMethod($requestURL, $token) {   
        //Secure example = http://gdatatips.blogspot.com/2008/07/secure-authsub-in-php.html
 
          $curl = curl_init();  
        curl_setopt($curl, CURLOPT_URL, $requestURL);
          curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);  
          curl_setopt($curl, CURLOPT_FAILONERROR, true);  
 
          curl_setopt($curl, CURLOPT_HTTPHEADER, array(  
              "Authorization: AuthSub token=\"$token\"")  
          );   
 
          $result = curl_exec($curl);
          curl_close($curl);
 
          return $result;  
    }
 
    function upgradeToken($token) {
        $response = $this->sendGetMethod("https://www.google.com/accounts/AuthSubSessionToken", $token);
 
        return $response;
    }

Also, to post a comment:

function postComment($comment, $id, $token) {
        $comment = "<?xml version='1.0' encoding='UTF-8'?><entry xmlns='http://www.w3.org/2005/Atom' xmlns:yt='http://gdata.youtube.com/schemas/2007'><content>$comment</content></entry>";
        $contentLength = strlen($comment);
 
        $curl = curl_init();  
        curl_setopt($curl, CURLOPT_URL, "http://gdata.youtube.com/feeds/api/videos/$id/comments");
          curl_setopt($curl, CURLOPT_POST, true);  
          curl_setopt($curl, CURLOPT_FAILONERROR, true);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);        
 
          curl_setopt($curl, CURLOPT_HTTPHEADER, array(  
              "Authorization: AuthSub token=\"$token\""
            ,"Content-Type: application/atom+xml"
            ,"Content-Length: $contentLength"
            ,"GData-Version: 2"
            ,"X-GData-Key: key={my_personal_dev_key}" )
          );           
 
        curl_setopt($curl, CURLOPT_POSTFIELDS, "$comment");        
 
          $result = curl_exec($curl);
        $info = curl_getinfo($curl);
 
        if(curl_errno($curl)) {
            $error_code = curl_errno($curl);
            $http_code = (string)$info['http_code'];
            ...}
 
        curl_close($curl);
 
          return $result;
}