MUSIC NATION SMTOWN OAUTH

OAuth 기본 정보

Basic Info
- 서버 URL
Authorization Basic
- Basic token 생성
Scopes
- Scopes

Refresh Token

access token이 만료될 때 새로운 access token과 refresh token을 얻을 수 있습니다.
access token의 기본 수명은 약 1시간, refresh token은 약 30일이며 refresh token api를 사용할 때마다 갱신됩니다.
refresh token은 Authorization code, Username/Password 인증에서만 발급됩니다.

POST https://auth.smtown.com/oauth/token
Authorization: Basic MGYxOWYxNG==
Content-Type: application/x-www-form-urlencoded

grant_type=refresh_token&scope=profile.info&refresh_token=0f244a6ff13c8fcf20bb6bab5fc6f

파라메타	필수여부	설명
`Authorization`	Header 필수	Basic token 입니다. Basic token 생성을 참고하세요.
`Content-Type`	Header 필수	POST의 content type 설정 : `application/x-www-form-urlencoded` 고정
`grant_type`	필수	`refresh_token` 고정
`scope`	필수	공백으로 구분할 수 있습니다.
`refresh_token`	필수	인증 섹션에서 전달받은 refresh_token 입니다.

성공 응답

HTTP/1.1 200
Content-Type: application/json;charset=UTF-8
{
    "access_token": "새로운 access token 14d4bc425de754",
    "token_type": "bearer",
    "refresh_token": "새로운 refresh token fcf20bb6bab5fc6f",
    "expires_in": 43199,
    "scope": "profile.info"
}

실패 응답 - invalid refresh token

HTTP/1.1 400
Content-Type: application/json;charset=UTF-8
{
    "error": "invalid_grant",
    "error_description": "Invalid refresh token: 0f244a6ff13c8fcf20bb6bab5fc6f"
}

실패 응답 - expired refresh token

HTTP/1.1 401
Content-Type: application/json;charset=UTF-8
{
    "error": "invalid_token",
    "error_description": "Invalid refresh token (expired): 0f244a6ff13c8fcf20bb6bab5fc6f"
}

샘플 - Refresh Token 요청

final private static String apiBaseURL = "https://auth.smtown.com";
final private static String tokenEndPoint = "oauth/token";
final private static String basicAuthorization = "MGYxOWYxNG==";

public static void main(String[] args){
    //implementation 'org.apache.httpcomponents:httpclient'

    try (CloseableHttpClient client = HttpClients.createDefault()) {
        List<NameValuePair> data = new ArrayList<>(Arrays.asList(
                new BasicNameValuePair( "grant_type",  "refresh_token" ),
                new BasicNameValuePair( "scope", "profile.info" ),
                new BasicNameValuePair( "refresh_token", "0f244a6ff13c8fcf20bb6bab5fc6f" )
        ));

        HttpPost post = new HttpPost(String.format("%s/%s", apiBaseURL, tokenEndPoint));
        post.setHeader("Authorization", String.format("Basic %s", basicAuthorization));
        post.setEntity(new UrlEncodedFormEntity(data, StandardCharsets.UTF_8));

        try(CloseableHttpResponse response = client.execute(post)) {
            if(response.getStatusLine().getStatusCode() == 200) {
                String responseData = EntityUtils.toString(response.getEntity(), StandardCharsets.UTF_8);
                System.out.println(responseData);
                /**
                 * {
                 * "access_token":"14d4bc425de754",
                 * "token_type":"bearer",
                 * "refresh_token":"fcf20bb6bab5fc6f",
                 * "expires_in":35274,
                 * "scope":"profile.info"
                 * }
                 */
            }
        }
    } catch (IOException e){
        throw new RuntimeException();
    }
}

private readonly string ApiBaseURL = "https://auth.smtown.com";
private readonly string TokenEndPoint = "oauth/token";
private readonly string BasicAuthorization = "MGYxOWYxNG==";

private async void GetAccessToken()
{
    var data = new Dictionary<string, string> {
        { "grant_type",  "refresh_token" },
        { "refresh_token", "0f244a6ff13c8fcf20bb6bab5fc6f" },
        { "scope", "profile.info" }
    };

    using System.Net.Http.HttpClient client = new(); System.Net.Http.HttpRequestMessage tokenRequest = new()
    {
        Method = HttpMethod.Post,
        RequestUri = new Uri(string.Format("{0}/{1}", ApiBaseURL, TokenEndPoint)),
        Content = new FormUrlEncodedContent(data)
    };

    tokenRequest.Content.Headers.ContentType = new MediaTypeWithQualityHeaderValue("application/x-www-form-urlencoded") { CharSet = "UTF-8" };
    tokenRequest.Headers.TryAddWithoutValidation("Authorization", string.Format("Basic {0}", BasicAuthorizaton));


    var response = await client.SendAsync(tokenRequest);
    if (response.IsSuccessStatusCode)
    {
        var responseData = await response.Content.ReadAsStringAsync();

        Console.WriteLine(responseData);
        /**
         * {
         * "access_token":"14d4bc425de754",
         * "token_type":"bearer",
         * "refresh_token":"fcf20bb6bab5fc6f",
         * "expires_in":35274,
         * "scope":"profile.info"
         * }
         */
    }
}