{"id":570,"date":"2011-09-10T14:41:00","date_gmt":"2011-09-10T14:41:00","guid":{"rendered":"http:\/\/www.javacodegeeks.com\/2012\/10\/google-clientlogin-utility-in-java.html"},"modified":"2012-10-21T20:17:57","modified_gmt":"2012-10-21T20:17:57","slug":"google-clientlogin-utility-in-java","status":"publish","type":"post","link":"https:\/\/www.javacodegeeks.com\/2011\/09\/google-clientlogin-utility-in-java.html","title":{"rendered":"Google ClientLogin Utility in Java"},"content":{"rendered":"
Authentication and Authorization for Google APIs is a common feature in today\u2019s applications requiring integration and information exchange with Google services. While most of this Google authentication process is tailored for web applications, it is also available for desktop and installed applications. For Desktop applications Google recommends using an authentication method called ClientLogin<\/a>.<\/p>\n

It is worth to mention that ClientLogin is for use when there is a high level of trust between the application and the owner of the protected data. It is mostly commonly recommend for cases where the application owns the protected data.<\/p>\n

The ClientLogin method works mainly by sending HTTP Post requests to Google service using specific parameters as described in Google documentation<\/a>. In this article we will use a different approach to implement ClientLogin authorization process. We will use Google APIs Client Library for Java<\/a>, which is a powerful java library for accessing Google\u2019s HTTP-based API\u2019s on the web. The most important class in this library is, obviously, the ClientLogin<\/a> class.<\/p>\n

1-Anatomy of the ClientLogin class:<\/strong><\/p>\n

ClientLogin class provides a single method authenticate() which handles the details of authentication process. it also provides an important internal class ErrorInfo which could be used to handle authentication errors and captcha challenge logic.<\/p>\n

In this post we present a clean wrapper class for ClientLogin which handles the complete ClientLogin authorization process including authentication errors parsing and captcha challenge handling.<\/p>\n

2-google-api-java-client Maven Dependencies:<\/strong><\/p>\n

We chose to use maven for building our project example. Maven provides dependencies for the Google APIs Client Library for Java. just add the following maven dependencies to your pom.xml file:<\/p>\n

<dependency>\r\n\t<groupId>com.google.api.client<\/groupId>\r\n\t<artifactId>google-api-client-googleapis-auth-clientlogin<\/artifactId>\r\n\t<version>1.2.3-alpha<\/version>\r\n<\/dependency>\r\n<dependency>\r\n\t<groupId>com.google.api.client<\/groupId>\r\n\t<artifactId>google-api-client-javanet<\/artifactId>\r\n\t<version>1.2.3-alpha<\/version>\r\n<\/dependency>\r\n<\/pre>\n
After that use maven:install to install the required jars to be included in our project classpath.<\/p>\n
3-GoogleClientLogin wrapper class:<\/strong><\/p>\n
Our wrapper class obviously contains a reference to ClientLogin . It provides public methods implementing the important functions of the authentication process.<\/p>\n
GoogleClientLogin has a constructor that takes a String representing the Google service you\u2019re requesting authorization for (for example \u201ccl\u201d for Google Calendar). The constructor looks like this:
 
<\/div> <\/div><\/p>\n
\/**\r\n* @param service\r\n*\/\r\npublic GoogleClientLogin(String service) {\r\n\tsuper();\r\n\tthis.service = service;\r\n\tauthenticator = new ClientLogin();\r\n\ttransport = GoogleTransport.create();\r\n\tauthenticator.authTokenType = service;\r\n}\r\n<\/pre>\n
The main method is authenticate(username,password) that takes two arguments representing the username and password input by user:<\/p>\n
\/**\r\n* @param username\r\n* @param password\r\n* @throws ClientLoginException\r\n*\/\r\npublic void authenticate(String username, String password)\r\n\t\tthrows ClientLoginException {\r\n\r\n\ttry {\r\n\r\n\t\t\/\/ authenticate with ClientLogin\r\n\t\tauthenticator.username = username;\r\n\t\tauthenticator.password = password;\r\n\t\tResponse response = authenticator.authenticate();\r\n\t\tthis.authToken = response.auth;\r\n\r\n\t} catch (HttpResponseException e) {\r\n\t\tparseError(e);\r\n\r\n\t} catch (IOException e) {\r\n\t\t\/\/ TODO Auto-generated catch block\r\n\t\te.printStackTrace();\r\n\t}\r\n\r\n}\r\n<\/pre>\n
This method sets ClientLogin variables (username and password) then calls ClientLogin.authenticate() which returns a Response instance. if the ClientLogin.authenticate() call is successful we store the Authentication token \u2018Response.auth\u2019. The advantage of the authenticate(username,password) wrapper method is its intelligent handling of authentication errors.<\/p>\n
Parsing Authentication errors:<\/strong><\/p>\n
We distinguish two Error categories that could be thrown during the call to Clientlogin.authenticate():<\/p>\n
a-unrecoverable Errors for which we use a ClientLoginException class
\nb-a recoverable error thrown when Google service requires a captcha challenge.<\/p>\n
For this later we use a separate Exception class CaptchaRequiredException which extends the first ClientLoginException class.<\/p>\n
Clientlogin.authenticate() throws a HttpResponseException if the authentication response has an error code. we provide a helper method for parsing this exception class as follows:<\/p>\n
\/**\r\n * @param e\r\n * @throws ClientLoginException\r\n *\/\r\nprivate void parseError(HttpResponseException e)\r\n\t\tthrows ClientLoginException {\r\n\ttry {\r\n\r\n\t\tClientLogin.ErrorInfo errorInfo = e.response.parseAs(ClientLogin.ErrorInfo.class);\r\n\t\terrorMessage = errorMsg.get(errorInfo.error);\r\n\t\tif (errorInfo.error.equals(CaptchaRequired)) {\r\n\t\t\tcaptchaToken = errorInfo.captchaToken;\r\n\t\t\tcaptchaUrl = errorInfo.captchaUrl;\r\n\t\t\tthrow new CaptchaRequiredException(errorMessage, e);\r\n\r\n\t\t} else\r\n\t\t\tthrow new ClientLoginException(errorMessage, e);\r\n\t} catch (IOException e1) {\r\n\r\n\t\tthrow new ClientLoginException(e1);\r\n\t}\r\n}\r\n<\/pre>\n
We Call HttpResponseException.response.parseAs(ClientLogin.ErrorInfo.class) to parse the response. If the error code is \u201cCaptchaRequired\u201d, we store errorInfo.captchaToken and errorInfo.captchaUrl then throw CaptchaRequiredException. For the rest of Error codes we just throw ClientLoginException.<\/p>\n
Authentication with CAPTCHA Challenge<\/strong><\/p>\n
In the case of a CAPTCHA challenge we provide a second authenticate() method which provides an extra argument \u2018captchaAnswer\u2019 representing the captcha key entered by user during a CAPTCHA challenge:<\/p>\n
\/**\r\n * @param username\r\n * @param password\r\n * @param captchaAnswer\r\n * @throws ClientLoginException\r\n *\/\r\npublic void authenticate(String username, String password,\r\n\t\tString captchaAnswer) throws ClientLoginException {\r\n\tauthenticator.username = username;\r\n\tauthenticator.password = password;\r\n\tauthenticator.captchaToken = this.captchaToken;\r\n\tauthenticator.captchaAnswer = captchaAnswer;\r\n\ttry {\r\n\t\tResponse response = authenticator.authenticate();\r\n\t\tthis.authToken = response.auth;\r\n\t} catch (HttpResponseException e) {\r\n\t\tparseError(e);\r\n\t} catch (IOException e) {\r\n\t\tthrow new ClientLoginException(e);\r\n\t}\r\n}\r\n<\/pre>\n
Before calling authenticator.authenticate() this method sets two extra fields authenticator.captchaToken and authenticator.captchaAnswer. Error handling for this method is the same as the main authenticate(username,password) method.<\/p>\n
Finally we provide a method to retrieve the CAPTCHA image that will be displayed to user:<\/p>\n
\/**\r\n * @return the captchaImage\r\n *\/\r\npublic BufferedImage getCaptchaImage() {\r\n\r\n\tBufferedImage image = null;\r\n\ttry {\r\n\t\tURL url = new URL(\"https:\/\/www.google.com\/accounts\/\"+ getCaptchaUrl());\r\n\t\timage = ImageIO.read(url);\r\n\t} catch (MalformedURLException e) {\r\n\t\t\/\/ TODO Auto-generated catch block\r\n\t\te.printStackTrace();\r\n\t\treturn null;\r\n\r\n\t} catch (IOException e) {\r\n\t\t\/\/ TODO Auto-generated catch block\r\n\t\te.printStackTrace();\r\n\t\treturn null;\r\n\t}\r\n\r\n\treturn image;\r\n}\r\n<\/pre>\n
You can view the complete GoogleClientLogin class source file here<\/a>.<\/p>\n
4-Testing GoogleClient wrapper class<\/strong><\/p>\n
GoogleClientLoginDialog<\/a> is a swing Dialog which presents an example of how to use GoogleClientLogin<\/a> wrapper class. It provides a feature to force Google service to send a CAPTCHA challenge. we implement this test using a thread that keeps sending random passwords until Google responds with a CAPTCHA challenge:<\/p>\n
private class ForceCaptchaRunnable implements Runnable{\r\n\r\n\tpublic void run() {\r\n\t\tRandom r = new Random();\r\n\t\tboolean isCaptcha = false;\r\n\t\twhile (!isCaptcha) {\r\n\t\t\ttry {\r\n\t\t\t\tclient.authenticate(textField.getText().trim(),\r\n\t\t\t\t\t\tpasswordField.getText().trim()+ r.nextInt(100));\r\n\t\t\t\tshowMessage(\"Auth Token: \"+client.getAuthToken());\r\n\t\t\t} catch (CaptchaRequiredException e1) {\r\n\r\n\t\t\t\tisCaptcha = true;\r\n\t\t\t\tshowCaptcha(true);\r\n\r\n\t\t\t} catch (ClientLoginException e1) {\r\n\r\n\t\t\t}\r\n\t\t}\r\n\r\n\t}\r\n\r\n}\r\n<\/pre>\n
<\/a><\/div>\n
You can view and download the complete source code of this sample project Google code project: google-apis-utils<\/a>. <\/p>\n
Reference: <\/i><\/strong>Google ClientLogin Utility in Java<\/a> from our JCG partner<\/a> Othman El Moulat at the Othman’s blog<\/a>. <\/p>\n
Related Articles :<\/i><\/strong><\/p>\n