如何通过每次 Retrofit API 调用发送更新的 Firebase 令牌

Question

每次我需要通过 Retrofit 在 Header 中发送我的 REST 请求时，我都想发送更新的令牌 (FirebaseAuth.getInstance().getAccessToken())。我已将 RetrofitClient 设置如下-

RetrofitClient.java

public class RetrofitClient {

    private static final String BASE_URL = "API_URL";
    private static RetrofitClient mInstance, mAuthInstance;
    private Retrofit retrofit;

    private RetrofitClient(boolean requireAuthorization, String firebaseID, Context context){

        HttpLoggingInterceptor loggingInterceptor = new HttpLoggingInterceptor();
        loggingInterceptor.setLevel(HttpLoggingInterceptor.Level.BODY);

        //Put Custom Header i.e. 'InterceptorHeader' in all API request
        OkHttpClient okHttpClient;

        if(requireAuthorization)
            okHttpClient = new OkHttpClient.Builder()
                    .addInterceptor(new ConnectivityInterceptor(context))               // Header to check internet connectivity
                    .addInterceptor(new AuthorizationInterceptorHeader(firebaseID))     // Header Auth InterceptorHeader
                    .addInterceptor(loggingInterceptor).build();                        // Header for logging
        else
            okHttpClient = new OkHttpClient.Builder()
                    .addInterceptor(new ConnectivityInterceptor(context))    // Header to check internet connectivity
                    .addInterceptor(new InterceptorHeader())                 // Header InterceptorHeader
                    .addInterceptor(loggingInterceptor).build();             // Header for logging


        retrofit = new Retrofit.Builder()
                .baseUrl(BASE_URL)
                .addConverterFactory(GsonConverterFactory.create())
                .client(okHttpClient) //adding custom OkHttp Client
                .build();
    }

    public static synchronized RetrofitClient getInstance(Context context){
        if(mInstance == null){
            mInstance = new RetrofitClient(false, null, context);
        }
        return mInstance;
    }

    public static synchronized RetrofitClient getAuthInstance(boolean requireAuthorization, String firebaseID, Context context){
        if(mAuthInstance == null){
            mAuthInstance = new RetrofitClient(requireAuthorization, firebaseID, context);
        }
        return mAuthInstance;
    }

    public TurnoAPI getTurnoApi(){
        return retrofit.create(TurnoAPI.class);
    }

}

AuthorizationInterceptorHeader.java

public class AuthorizationInterceptorHeader implements Interceptor {

    String firebaseID;

    public AuthorizationInterceptorHeader(String firebaseID) {
        this.firebaseID = firebaseID;
    }

    @NotNull
    @Override
    public Response intercept(@NotNull Chain chain) throws IOException {

        Request originalRequest = chain.request();

        //TODO change request header
        Request newRequest = originalRequest.newBuilder()
                .addHeader("Content-Type", "application/json")
                .addHeader("api-key", "api_key")
                .addHeader("api-hash", "api_key")
                .addHeader("**Authorization**", "FIREBASE_TOKEN")
                .build();
        return chain.proceed(newRequest);
    }
}

我想在标题中发送 FirebaseAuth.getInstance().getCurrentUser().getIdToken() 说 Authorization。现在因为 getIdToken() 正在返回一个任务，所以我不确定我需要如何设置以使用更新的 Firebase 令牌发出每个身份验证请求，任何解决方法都将不胜感激。谢谢。

Answer 1

试试这个

FirebaseUserIdTokenInterceptor.java

public class FirebaseUserIdTokenInterceptor implements Interceptor {

    // Custom header for passing ID token in request.
    private static final String X_FIREBASE_ID_TOKEN = "YOUR-CUSTOM-HEADER";

    @Override
    public Response intercept(Chain chain) throws IOException {
        Request request = chain.request();
        try {
            FirebaseUser user = FirebaseAuth.getInstance().getCurrentUser();
            if (user == null) return chain.proceed(request); // No has auth header

            Task<GetTokenResult> task = user.getIdToken(false);
            GetTokenResult tokenResult = Tasks.await(task, 10, TimeUnit.SECONDS); // Timeout 10 Seconds
            String idToken = tokenResult.getToken();
            if (idToken == null) return chain.proceed(request); // No has auth header

            return chain.proceed(request.newBuilder()
                    .addHeader(X_FIREBASE_ID_TOKEN, idToken)
                    .build()); // Has auth header
        } catch (Exception e) {
            return chain.proceed(request); // No has auth header
        }
    }
}

我找到了一个方法here 并为我修改了它。

Answer 2

这可能是我的错，因为我没有正确地提出我的问题。但我找到了解决方案并将其发布，以便对某人有所帮助。

重构问题

我试图将 FirebaseTokenID(JWT) 与我的每个 REST API 请求一起发送。我没有保留 tokenID 的本地副本，因为 tokenID 的生命周期很短，只有 1 小时。 要从 Firebase 获取 JWT，有以下方法-

FirebaseAuth.getInstance().getCurrentUser().getIdToken()

但这将返回一个任务，因此我必须管理对 getIDToken() 的调用，并等到返回任务完成后才能调用我的 API 方法。

为了解决这个问题，我使用接口进行调用。

TokenListener.java

public interface TokenListener {

    void getToken(String firebaseToken);
}

FirebaseToken.java

public class FirebaseToken {

    public static void getFirebaseToken(TokenListener tokenListener){
        FirebaseAuth.getInstance().getCurrentUser().getIdToken(false)
                .addOnCompleteListener(new OnCompleteListener<GetTokenResult>() {
                    @Override
                    public void onComplete(@NonNull Task<GetTokenResult> task) {
                        if(task.isSuccessful())
                            tokenListener.getToken(task.getResult().getToken());
                    }
                });
    }
}

现在从每个调用 API 并需要 TokenID 的类中，我正在实现 TokenListener 以获取当前/活动的 tokenID(JWT) 并继续调用我的 API 方法以将其用作参数标头通过 AuthorizationInterceptorHeader 添加到 RetrofitClient 类中。

AuthorizationInterceptorHeader.java

public class AuthorizationInterceptorHeader implements Interceptor {

    String firebaseToken;

    public AuthorizationInterceptorHeader(String firebaseToken) {
        this.firebaseToken = firebaseToken;
    }

    @NotNull
    @Override
    public Response intercept(@NotNull Chain chain) throws IOException {

        Request originalRequest = chain.request();

        Request newRequest = originalRequest.newBuilder()
                .addHeader("Content-Type", "application/json")
                .addHeader("api-key", "api-key")
                .addHeader("api-hash", "api-hasg")
                .addHeader("Authorization", firebaseToken)
                .build();
        return chain.proceed(newRequest);
    }
}

编码愉快！！

Answer 3

您可以从返回的任务中获取令牌，并将其发送到 header -

 task.getResult().getToken();