{"id":33701,"date":"2023-09-27T04:12:30","date_gmt":"2024-02-27T14:52:46","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/"},"modified":"2024-05-04T01:46:03","modified_gmt":"2024-05-03T17:46:03","slug":"%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/","title":{"rendered":"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5"},"content":{"rendered":"

\u4f60\u597d\uff01\u6211\u662fhagurere\u3002\u8fd9\u6b21\u5728\u4e2a\u4eba\u5f00\u53d1\u4e2d\uff0c\u6211\u6709\u4e00\u4e2a\u9700\u6c42\u662f\u4eceRails\u670d\u52a1\u5668\u64cd\u4f5c\u7ec8\u7aef\u7528\u6237\u7684AWS\u73af\u5883\uff0c\u6240\u4ee5\u6211\u8fdb\u884c\u4e86\u4e00\u4e9b\u65b9\u6cd5\u7684\u7814\u7a76\u5e76\u5b9e\u73b0\u4e86\u3002\u56e0\u4e3a\u8fd9\u662f\u4e00\u4e2a\u4e0d\u592a\u5e38\u89c1\u7684\u9700\u6c42\uff0c\u6211\u6ca1\u6709\u627e\u5230\u7c7b\u4f3c\u7684\u6587\u6863\uff0c\u6240\u4ee5\u5728\u8fd9\u91cc\u7559\u4e0b\u6765\u5907\u5fd8\u3002<\/p>\n

\u6982\u62ec<\/h1>\n

\u6839\u636e\u7528\u6237\u8f93\u5165\u7684IAM\u89d2\u8272\u548c\u7531Google OAuth2\u751f\u6210\u7684id_token\uff0c\u901a\u8fc7AWS::STS::Client.assume_role_with_web_identity\u53d1\u884c\u4e34\u65f6\u7684access_key\uff0c\u5e76\u4f7f\u7528\u8be5access_key\u4eceS3\u83b7\u53d6\u5bf9\u8c61\u3002<\/p>\n

\u7531\u4e8e\u8fd9\u53ea\u662f\u4e00\u4e2a\u7528\u4e8e\u9a8c\u8bc1\u7684\u7b80\u5316\u5b9e\u65bd\uff0c\u6240\u4ee5\u6ca1\u6709\u8003\u8651\u7ec6\u8282\u3002<\/p>\n

\u73af\u5883<\/h1>\n

Rails\uff087.0.4\uff09
\nRuby\uff083.1.4\uff09
\nAWS-SDK-S3\uff081.136.0\uff09
\nOmniauth\uff082.1.1\uff09
\nOmniauth-Google-OAuth2\uff081.1.1\uff09
\nRedis\uff084.8.1\uff09<\/p>\n

\u83b7\u53d6 Google \u8ba4\u8bc1\u548c ID Token\u3002<\/h1>\n
\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n

\u9996\u5148\uff0c\u6211\u4eec\u5c06\u4eceomniauth-google-oauth2\u7684OIDC\u8ba4\u8bc1\u5f00\u59cb\u6784\u5efa\u3002<\/p>\n

\u8bf7\u542f\u52a8\u4e00\u4e2a\u5408\u9002\u7684Rails\u670d\u52a1\u5668\u5e76\u786e\u4fdd\u53ef\u4ee5\u4f7f\u7528session\u3002\u6211\u4f7f\u7528Redis\u3002<\/p>\n

\u8bf7\u901a\u8fc7 Google API \u8fdb\u884c OAuth2 \u8bbe\u7f6e\u5e76\u751f\u6210 client_id\u3002<\/p>\n

\u8bf7\u53c2\u8003Google API\u63a7\u5236\u53f0\u7684\u5b98\u65b9\u6587\u6863\u4ee5\u4e86\u89e3\u8bbe\u7f6e\u7684\u65b9\u6cd5\uff08\u975e\u5e38\u62b1\u6b49\u4e0d\u591f\u5177\u4f53\uff09\u3002<\/p>\n

\u6211\u8981\u6dfb\u52a0\u4e00\u4e2a\u5b9d\u77f3\u3002<\/p>\n

gem<\/span> 'omniauth'<\/span>\r\ngem<\/span> 'omniauth-rails_csrf_protection'<\/span>\r\ngem<\/span> 'omniauth-google-oauth2'<\/span>\r\ngem<\/span> 'redis'<\/span>\r\ngem<\/span> 'redis-actionpack'<\/span>\r\n<\/code><\/pre>\n
\u8fd0\u884c”bundle install”\u547d\u4ee4\uff0c\u521b\u5efa”omniauth.rb”\u6587\u4ef6\u3002<\/p>\n
\u4e3a\u4e86\u83b7\u5f97id_token\uff0c\u6211\u5c06openid\u4f5c\u4e3ascope\u52a0\u5165\u3002<\/p>\n
# config\/initializes\/omniauth.rb<\/span>\r\n\r\nRails<\/span>.<\/span>application<\/span>.<\/span>config<\/span>.<\/span>middleware<\/span>.<\/span>use<\/span> OmniAuth<\/span>::<\/span>Builder<\/span> do<\/span>\r\n  provider<\/span> :google_oauth2<\/span>,<\/span>\r\n           ENV<\/span>[<\/span>'GOOGLE_OAUTH_CLIENT_ID'<\/span>],<\/span>\r\n           ENV<\/span>[<\/span>'GOOGLE_OAUTH_CLIENT_SECRET'<\/span>],<\/span>\r\n           {<\/span>\r\n             scope: <\/span>'openid,profile,email,offline'<\/span>,<\/span>\r\n             prompt: <\/span>'select_account consent'<\/span>,<\/span>\r\n             access_type: <\/span>'offline'<\/span>,<\/span>\r\n             provider_ignores_state: <\/span>Rails<\/span>.<\/span>env<\/span>.<\/span>development?<\/span> # \u30bb\u30c3\u30b7\u30e7\u30f3\u30b9\u30c8\u30a2\u306e\u30c9\u30e1\u30a4\u30f3\u554f\u984c\u3067CSRF\u30a8\u30e9\u30fc\u304c\u51fa\u308b\u305f\u3081\u958b\u767a\u74b0\u5883\u306e\u307ftrue<\/span>\r\n           }<\/span>\r\nend<\/span>\r\nOmniAuth<\/span>.<\/span>config<\/span>.<\/span>allowed_request_methods<\/span> =<\/span> [<\/span>:post<\/span>,<\/span> :get<\/span>]<\/span>\r\n<\/code><\/pre>\n
\u521b\u5efa session_store.rb \u6587\u4ef6\u3002<\/p>\n
host<\/span> =<\/span> ENV<\/span>.<\/span>fetch<\/span>(<\/span>\"SESSION_STORE_REDIS_HOST\"<\/span>)<\/span>\r\nport<\/span> =<\/span> ENV<\/span>.<\/span>fetch<\/span>(<\/span>\"SESSION_STORE_REDIS_PORT\"<\/span>)<\/span>\r\ndb<\/span> =<\/span> ENV<\/span>.<\/span>fetch<\/span>(<\/span>\"SESSION_STORE_REDIS_DB\"<\/span>)<\/span>\r\n\r\nservers<\/span> =<\/span> [<\/span>\"redis:\/\/<\/span>#{<\/span>host<\/span>}<\/span>:<\/span>#{<\/span>port<\/span>}<\/span>\/<\/span>#{<\/span>db<\/span>}<\/span>\/session\"<\/span>]<\/span>\r\n\r\nRails<\/span>.<\/span>application<\/span>.<\/span>config<\/span>.<\/span>session_store<\/span> :redis_store<\/span>,<\/span>\r\n                                       servers<\/span>:,<\/span>\r\n                                       key: <\/span>'_chocozap_mypage_session'<\/span>,<\/span>\r\n                                       secure: <\/span>Rails<\/span>.<\/span>env<\/span>.<\/span>production?<\/span>,<\/span>\r\n                                       httponly: <\/span>true<\/span>,<\/span>\r\n                                       same_site: :strict<\/span>\r\n<\/code><\/pre>\n
\u8fd9\u662f\u4e00\u4e2aroutes.rb\u6587\u4ef6\u7684\u6837\u4f8b\u3002<\/p>\n
Rails<\/span>.<\/span>application<\/span>.<\/span>routes<\/span>.<\/span>draw<\/span> do<\/span>\r\n  get<\/span> '\/auth\/:provider\/callback'<\/span>,<\/span> to: <\/span>'sessions#create'<\/span>\r\n  get<\/span> 'auth\/failure'<\/span>,<\/span> to: <\/span>'sessions#failure'<\/span>\r\nend<\/span>\r\n<\/code><\/pre>\n
\u6211\u8981\u521b\u5efasessions_controller\u3002\u8fd9\u4e2a\u662f\u4e3a\u4e86\u9a8c\u8bc1\u800c\u521b\u5efa\u7684\uff0c\u6240\u4ee5\u975e\u5e38\u968f\u4fbf\u3002\u662f\u4e0d\u662f\u89c9\u5f97render inline\u8d85\u7ea7\u597d\u7528\u5462\uff1f\u54c8\u54c8\u54c8<\/p>\n
\u203b \u5982\u679c\u8981\u5b9e\u9645\u5b9e\u65bd\uff0c\u8bf7\u6ce8\u610f\u5904\u7406access_token\u3001id_token\u548crefresh_token\u3002<\/p>\n
class<\/span> SessionsController<\/span> <<\/span> ApplicationController<\/span>\r\n  def<\/span> create<\/span>\r\n    info<\/span> =<\/span> request<\/span>.<\/span>env<\/span>[<\/span>'omniauth.auth'<\/span>][<\/span>'info'<\/span>]<\/span>\r\n    session<\/span>[<\/span>:name<\/span>]<\/span> =<\/span> info<\/span>[<\/span>'name'<\/span>]<\/span>\r\n    session<\/span>[<\/span>:email<\/span>]<\/span> =<\/span> info<\/span>[<\/span>'email'<\/span>]<\/span>\r\n    session<\/span>[<\/span>:image<\/span>]<\/span> =<\/span> info<\/span>[<\/span>'image'<\/span>]<\/span>\r\n    session<\/span>[<\/span>:access_token<\/span>]<\/span> =<\/span> request<\/span>.<\/span>env<\/span>[<\/span>'omniauth.auth'<\/span>][<\/span>'credentials'<\/span>][<\/span>'token'<\/span>]<\/span>\r\n    session<\/span>[<\/span>:refresh_token<\/span>]<\/span> =<\/span> request<\/span>.<\/span>env<\/span>[<\/span>'omniauth.auth'<\/span>][<\/span>'credentials'<\/span>][<\/span>'refresh_token'<\/span>]<\/span>\r\n    session<\/span>[<\/span>:id_token<\/span>]<\/span> =<\/span> request<\/span>.<\/span>env<\/span>[<\/span>'omniauth.auth'<\/span>].<\/span>extra<\/span>[<\/span>:id_token<\/span>]<\/span>\r\n    render<\/span> inline: <\/span>\"name: <\/span>#{<\/span>session<\/span>[<\/span>:name<\/span>]<\/span>}<\/span>, email: <\/span>#{<\/span>session<\/span>[<\/span>:email<\/span>]<\/span>}<\/span>, id_token: <\/span>#{<\/span>session<\/span>[<\/span>:id_token<\/span>]<\/span>}<\/span>\"<\/span>\r\n  end<\/span>\r\n\r\n  def<\/span> failure<\/span>\r\n    render<\/span> inline: <\/span>'failure'<\/span>,<\/span> status: <\/span>401<\/span>\r\n  end<\/span>\r\nend<\/span>\r\n<\/code><\/pre>\n
\u4ee5\u4e0b\u662f.env\u6587\u4ef6\u7684\u793a\u4f8b\u3002<\/p>\n
\r\nSESSION_STORE_DISABLE_REDIS_CLUSTER<\/span>=<\/span>true<\/span>\r\nSESSION_STORE_REDIS_HOST<\/span>=<\/span>redis<\/span>\r\nSESSION_STORE_REDIS_PORT<\/span>=<\/span>6379<\/span>\r\nSESSION_STORE_REDIS_DB<\/span>=<\/span>0<\/span>\r\nGOOGLE_OAUTH_CLIENT_ID<\/span>=<\/span>xxxxxxxxxxxxx<\/span>.<\/span>apps<\/span>.<\/span>googleusercontent<\/span>.<\/span>com<\/span>\r\nGOOGLE_OAUTH_CLIENT_SECRET<\/span>=<\/span>xxxxxxxxx<\/span>\r\n<\/code><\/pre>\n
\u53ea\u8981\u8bbf\u95ee\/auth\/google-oauth-2\uff0c\u5b83\u5e94\u8be5\u80fd\u6b63\u5e38\u8fd0\u884c\u3002<\/p>\n
\"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8<\/div>\n
\u7ed9\u4e88IAM\u89d2\u8272<\/h1>\n
\"FireShot<\/div>\n
\u6211\u4f1a\u6309\u7167\u753b\u50cf\u7684\u6837\u5b50\u8fdb\u884c\u5236\u4f5c\u3002<\/p>\n
\u8bf7\u5c06Google\u7684client_id\u653e\u5165Audience\u4e2d.<\/p>\n
\u5728\u6dfb\u52a0\u8bb8\u53ef\u540e\uff0c\u60a8\u53ef\u4ee5\u9644\u52a0\u60a8\u559c\u6b22\u7684\u653f\u7b56\uff0c\u5e76\u7ed9\u5176\u8d77\u4e00\u4e2a\u5408\u9002\u7684\u540d\u79f0\u548c\u6807\u7b7e\uff0c\u8fd9\u6837\u5c31\u5b8c\u6210\u4e86\u3002<\/p>\n
\u901a\u8fc7IAM\u89d2\u8272\u548cid_token\u751f\u6210\u4e34\u65f6\u7684access_key\uff0c\u5e76\u8bbf\u95eeS3\u3002<\/h1>\n
\u6211\u4eec\u5c06\u4ece\u8fd9\u91cc\u5f00\u59cb\u4f7f\u7528Rails\u63a7\u5236\u53f0\u8fdb\u884c\u9a8c\u8bc1\u3002Rails\u63a7\u5236\u53f0\u771f\u662f\u65b9\u4fbf\u5462\uff01<\/p>\n
\u6211\u8ba4\u4e3a\u5728\u5b9e\u9645\u5b9e\u73b0\u65f6\uff0c\u6211\u4eec\u9700\u8981\u5728\u5e93\u7684\u5185\u90e8\u521b\u5efa\u4e00\u4e2a\u7c7b\u6765\u5b9e\u73b0\u3002<\/p>\n
\u8bf7\u5c06\u5728\u8ba4\u8bc1\u8fc7\u7a0b\u4e2d\u751f\u6210\u7684id_token\u653e\u5165\u3002<\/p>\n
irb<\/span>(<\/span>main<\/span>):<\/span>001<\/span>:<\/span>0<\/span>><\/span> google_access_token<\/span> =<\/span> 'eyJhbG\u304b\u3089\u59cb\u307e\u308bid_token'<\/span>\r\n<\/code><\/pre>\n
\u4f7f\u7528Aws::STS\u8c03\u7528assume_role\u521b\u5efa\u89d2\u8272\u3002<\/p>\n
\u8bf7\u5c06\u521a\u624d\u521b\u5efa\u7684IAM\u89d2\u8272\u7684ARN\u653e\u5165role_arn\u4e2d\u3002<\/p>\n
irb<\/span>(<\/span>main<\/span>):<\/span>002<\/span>:<\/span>0<\/span>><\/span> sts_client<\/span> =<\/span> Aws<\/span>::<\/span>STS<\/span>::<\/span>Client<\/span>.<\/span>new<\/span>(<\/span>region: <\/span>'us-east-1'<\/span>)<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>003<\/span>:<\/span>2<\/span>*<\/span> resp<\/span> =<\/span> sts_client<\/span>.<\/span>assume_role_with_web_identity<\/span>({<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>004<\/span>:<\/span>2<\/span>*<\/span>   role_arn: <\/span>\"arn:aws:iam::111111111111:role\/aws-assumerole-test\"<\/span>,<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>005<\/span>:<\/span>2<\/span>*<\/span>   role_session_name: <\/span>\"\u9069\u5f53\u306a\u6587\u5b57\u5217\"<\/span>,<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>006<\/span>:<\/span>2<\/span>*<\/span>   web_identity_token: <\/span>google_access_token<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>007<\/span>:<\/span>0<\/span>><\/span> })<\/span>\r\n=><\/span> \r\n#<struct Aws::STS::Types::AssumeRoleWithWebIdentityResponse<\/span>\r\n<\/code><\/pre>\n
\u4f7f\u7528\u4e4b\u524d\u521b\u5efa\u7684assume_role\u6765\u521b\u5efaAws::Credentials\u5bf9\u8c61\u3002<\/p>\n
irb<\/span>(<\/span>main<\/span>):<\/span>00<\/span>8<\/span>:<\/span>1<\/span>*<\/span> credentials<\/span> =<\/span> Aws<\/span>::<\/span>Credentials<\/span>.<\/span>new<\/span>(<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>00<\/span>9<\/span>:<\/span>1<\/span>*<\/span>   resp<\/span>.<\/span>credentials<\/span>.<\/span>access_key_id<\/span>,<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>010<\/span>:<\/span>1<\/span>*<\/span>   resp<\/span>.<\/span>credentials<\/span>.<\/span>secret_access_key<\/span>,<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>011<\/span>:<\/span>1<\/span>*<\/span>   resp<\/span>.<\/span>credentials<\/span>.<\/span>session_token<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>012<\/span>:<\/span>0<\/span>><\/span> )<\/span>\r\n=><\/span> #<Aws::Credentials access_key_id=\"ASIA3GTOZJWOHDDUPQKS\"><\/span>\r\n<\/code><\/pre>\n
\u53ea\u9700\u8981\u4f7f\u7528\u521b\u5efa\u7684\u51ed\u636e\u50cf\u5f80\u5e38\u4e00\u6837\u83b7\u53d6s3\u5bf9\u8c61\u3002<\/p>\n
\u8bf7\u4e8b\u5148\u5c06\u9a8c\u8bc1\u6587\u4ef6\u653e\u5728S3\u4e0a\u3002<\/p>\n
\u5728\u7b2c17\u884c\u8f93\u51fa\u4e86\u4e00\u4e2a\u540d\u4e3a”hoge”\u7684\u5b57\u7b26\u4e32\u3002\u8fd9\u662fs3\u6587\u4ef6\u7684\u5185\u5bb9\uff0c\u6240\u4ee5\u662f\u6210\u529f\u7684\u3002<\/p>\n
irb<\/span>(<\/span>main<\/span>):<\/span>013<\/span>:<\/span>1<\/span>*<\/span>   response<\/span> =<\/span> s3<\/span>.<\/span>get_object<\/span>(<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>014<\/span>:<\/span>1<\/span>*<\/span>     bucket: <\/span>'aws-assumerole-test'<\/span>,<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>015<\/span>:<\/span>1<\/span>*<\/span>     key: <\/span>'hoge.txt'<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>016<\/span>:<\/span>0<\/span>><\/span>   )<\/span>\r\n=><\/span> \r\n#<struct Aws::S3::Types::GetObjectOutput<\/span>\r\n...<\/span>\r\nirb<\/span>(<\/span>main<\/span>):<\/span>017<\/span>:<\/span>0<\/span>><\/span> puts<\/span> response<\/span>.<\/span>body<\/span>.<\/span>read<\/span>\r\nhoge<\/span>\r\n=><\/span> nil<\/span>\r\n<\/code><\/pre>\n
\u603b\u7ed3<\/h1>\n
\u6211\u8ba4\u4e3a\u5f88\u5c11\u4f1a\u76f4\u63a5\u64cd\u4f5c\u7528\u6237\u7684AWS\u73af\u5883\uff0c\u4f46\u5982\u679c\u6709\u901a\u8fc7\u7ba1\u7406\u754c\u9762\u6765\u64cd\u4f5cAWS\u7684\u9700\u6c42\uff0c\u5c31\u4f1a\u50cf\u672c\u6b21\u5b9e\u73b0\u7684\u65b9\u5f0f\u4e00\u6837\u3002<\/p>\n
\u611f\u8c22\u60a8\u4e00\u76f4\u4ee5\u6765\u7684\u89c2\u770b\u3002<\/p>\n
\u6211\u4eec\u613f\u610f\u63a5\u53d7\u8865\u5145\u548c\u5efa\u8bae\uff0c\u6b22\u8fce\u7559\u4e0b\u60a8\u7684\u8bc4\u8bba\uff01<\/p>\n","protected":false},"excerpt":{"rendered":"
\u4f60\u597d\uff01\u6211\u662fhagurere\u3002\u8fd9\u6b21\u5728\u4e2a\u4eba\u5f00\u53d1\u4e2d\uff0c\u6211\u6709\u4e00\u4e2a\u9700\u6c42\u662f\u4eceRails\u670d\u52a1\u5668\u64cd\u4f5c\u7ec8\u7aef\u7528\u6237\u7684AWS\u73af\u5883\uff0c\u6240\u4ee5\u6211 […]<\/p>\n","protected":false},"author":12,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-33701","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528rails\u548cgoogle-oauth\u64cd\u4f5c\u4ed6\u4eba\u7684aws\u73af\u5883\u7684\u65b9\u6cd5\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5\" \/>\n<meta property=\"og:description\" content=\"\u4f60\u597d\uff01\u6211\u662fhagurere\u3002\u8fd9\u6b21\u5728\u4e2a\u4eba\u5f00\u53d1\u4e2d\uff0c\u6211\u6709\u4e00\u4e2a\u9700\u6c42\u662f\u4eceRails\u670d\u52a1\u5668\u64cd\u4f5c\u7ec8\u7aef\u7528\u6237\u7684AWS\u73af\u5883\uff0c\u6240\u4ee5\u6211 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528rails\u548cgoogle-oauth\u64cd\u4f5c\u4ed6\u4eba\u7684aws\u73af\u5883\u7684\u65b9\u6cd5\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-27T14:52:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-03T17:46:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d196e37434c4406c0936e\/7-0.png\" \/>\n<meta name=\"author\" content=\"\u9038, \u79d1\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u9038, \u79d1\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/\",\"name\":\"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2024-02-27T14:52:46+00:00\",\"dateModified\":\"2024-05-03T17:46:03+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487\",\"name\":\"\u9038, \u79d1\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g\",\"caption\":\"\u9038, \u79d1\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528rails\u548cgoogle-oauth\u64cd\u4f5c\u4ed6\u4eba\u7684aws\u73af\u5883\u7684\u65b9\u6cd5\/","og_locale":"zh_CN","og_type":"article","og_title":"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5","og_description":"\u4f60\u597d\uff01\u6211\u662fhagurere\u3002\u8fd9\u6b21\u5728\u4e2a\u4eba\u5f00\u53d1\u4e2d\uff0c\u6211\u6709\u4e00\u4e2a\u9700\u6c42\u662f\u4eceRails\u670d\u52a1\u5668\u64cd\u4f5c\u7ec8\u7aef\u7528\u6237\u7684AWS\u73af\u5883\uff0c\u6240\u4ee5\u6211 […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u4f7f\u7528rails\u548cgoogle-oauth\u64cd\u4f5c\u4ed6\u4eba\u7684aws\u73af\u5883\u7684\u65b9\u6cd5\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2024-02-27T14:52:46+00:00","article_modified_time":"2024-05-03T17:46:03+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d196e37434c4406c0936e\/7-0.png"}],"author":"\u9038, \u79d1","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u9038, \u79d1","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"2 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/","name":"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2024-02-27T14:52:46+00:00","dateModified":"2024-05-03T17:46:03+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528Rails\u548cGoogle OAuth\u64cd\u4f5c\u4ed6\u4eba\u7684AWS\u73af\u5883\u7684\u65b9\u6cd5"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/85c1dae56e6ea1e695c73d33c684d487","name":"\u9038, \u79d1","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c94f6d9cbbfbca863fab309840bd690c153c95f8490c290ad2ed54dd693dad16?s=96&d=mm&r=g","caption":"\u9038, \u79d1"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keyi\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e4%bd%bf%e7%94%a8rails%e5%92%8cgoogle-oauth%e6%93%8d%e4%bd%9c%e4%bb%96%e4%ba%ba%e7%9a%84aws%e7%8e%af%e5%a2%83%e7%9a%84%e6%96%b9%e6%b3%95\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/33701","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=33701"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/33701\/revisions"}],"predecessor-version":[{"id":95368,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/33701\/revisions\/95368"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=33701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=33701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=33701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}