blocks|key|257238|text|将此代码添加到scope+-+https://www.googleapis.com/auth/userinfo.profile中|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|257239|授权完成后，从-+https://www.googleapis.com/oauth2/v1/userinfo?alt=json获取信息|257240|它有很多东西--包括名字，公共资料网址，性别，照片等等。|257241|entityMap|0|LINK|mutability|MUTABLE|url|https://www.googleapis.com/auth/userinfo.profile|1|https://www.googleapis.com/oauth2/v1/userinfo?alt=json^0|F|1C|0|0|9|1I|1|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]]|C|$]]|$1|F|3|G|5|6|7|Z|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]|P|$5|K|L|M|C|$N|Q]]]]

Add this to the scope - <a href="https://www.googleapis.com/auth/userinfo.profile">https://www.googleapis.com/auth/userinfo.profile</a>

And after authorization is done, get the information from - <a href="https://www.googleapis.com/oauth2/v1/userinfo?alt=json">https://www.googleapis.com/oauth2/v1/userinfo?alt=json</a>

It has loads of stuff - including name, public profile url, gender, photo etc.

blocks|key|3158008|text|作用域-+https://www.googleapis.com/auth/userinfo.profile|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3158009|return+youraccess_token+=+access_token|code-block|syntax|javascript|3158010|获取https://www.googleapis.com/oauth2/v1/userinfo?alt=json&access_token=youraccess_token|3158011|您将获得json：|3158012|{
+"id":+"xx",
+"name":+"xx",
+"given_name":+"xx",
+"family_name":+"xx",
+"link":+"xx",
+"picture":+"xx",
+"gender":+"xx",
+"locale":+"xx"
}|3158013|致塔希尔·牙生：|3158014|这是一个php示例。|3158015|您可以使用json_decode函数来获取userInfo数组。|3158016|$q+=+'https://www.googleapis.com/oauth2/v1/userinfo?access_token=xxx';
$json+=+file_get_contents($q);
$userInfoArray+=+json_decode($json,true);
$googleEmail+=+$userInfoArray['email'];
$googleFirstName+=+$userInfoArray['given_name'];
$googleLastName+=+$userInfoArray['family_name'];|3158017|entityMap|0|LINK|mutability|MUTABLE|url|https://www.googleapis.com/auth/userinfo.profile|1|https://www.googleapis.com/oauth2/v1/userinfo?alt=json&access_token=youraccess_token^0|5|1C|0|0|0|2|2C|1|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@$A|17|B|18|1|19]]|C|$]]|$1|D|3|E|5|F|7|1A|8|@]|9|@]|C|$G|H]]|$1|I|3|J|5|6|7|1B|8|@]|9|@$A|1C|B|1D|1|1E]]|C|$]]|$1|K|3|L|5|6|7|1F|8|@]|9|@]|C|$]]|$1|M|3|N|5|F|7|1G|8|@]|9|@]|C|$G|H]]|$1|O|3|P|5|6|7|1H|8|@]|9|@]|C|$]]|$1|Q|3|R|5|6|7|1I|8|@]|9|@]|C|$]]|$1|S|3|T|5|6|7|1J|8|@]|9|@]|C|$]]|$1|U|3|V|5|F|7|1K|8|@]|9|@]|C|$G|H]]|$1|W|3|-4|5|6|7|1L|8|@]|9|@]|C|$]]]|X|$Y|$5|Z|10|11|C|$12|13]]|14|$5|Z|10|11|C|$12|15]]]]

scope - <a href="https://www.googleapis.com/auth/userinfo.profile" rel="noreferrer">https://www.googleapis.com/auth/userinfo.profile</a>

<pre><code>return youraccess_token = access_token
</code></pre>

get <a href="https://www.googleapis.com/oauth2/v1/userinfo?alt=json&amp;access_token=youraccess_token" rel="noreferrer">https://www.googleapis.com/oauth2/v1/userinfo?alt=json&amp;access_token=youraccess_token</a>

you will get json:

<pre><code>{
 "id": "xx",
 "name": "xx",
 "given_name": "xx",
 "family_name": "xx",
 "link": "xx",
 "picture": "xx",
 "gender": "xx",
 "locale": "xx"
}
</code></pre>

To Tahir Yasin:

This is a php example. 
You can use json_decode function to get userInfo array.

<pre><code>$q = 'https://www.googleapis.com/oauth2/v1/userinfo?access_token=xxx';
$json = file_get_contents($q);
$userInfoArray = json_decode($json,true);
$googleEmail = $userInfoArray['email'];
$googleFirstName = $userInfoArray['given_name'];
$googleLastName = $userInfoArray['family_name'];
</code></pre>

blocks|key|2943955|text|此作用域https://www.googleapis.com/auth/userinfo.profile现在已弃用。请看https://developers.google.com/%2B/api/auth-migration#timetable。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2943956|您将用于获取配置文件信息的新作用域是:+profile或https://www.googleapis.com/auth/plus.login|2943957|端点是-+https://www.googleapis.com/plus/v1/people/{+userId+}+-对于当前登录的用户，userId可以只是'me‘。|2943958|entityMap|0|LINK|mutability|MUTABLE|url|https://www.googleapis.com/auth/userinfo.profile|1|https://developers.google.com/%2B/api/auth-migration#timetable|2|https://www.googleapis.com/auth/plus.login|3|https://www.googleapis.com/plus/v1/people/^0|4|1C|0|1O|1O|1|0|S|16|2|0|5|16|3|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]|$A|Z|B|10|1|11]]|C|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@$A|13|B|14|1|15]]|C|$]]|$1|F|3|G|5|6|7|16|8|@]|9|@$A|17|B|18|1|19]]|C|$]]|$1|H|3|-4|5|6|7|1A|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]|P|$5|K|L|M|C|$N|Q]]|R|$5|K|L|M|C|$N|S]]|T|$5|K|L|M|C|$N|U]]]]

This scope <a href="https://www.googleapis.com/auth/userinfo.profile">https://www.googleapis.com/auth/userinfo.profile</a> has been deprecated now. Please look at <a href="https://developers.google.com/+/api/auth-migration#timetable">https://developers.google.com/+/api/auth-migration#timetable</a>. 

New scope you will be using to get profile info is: profile or <a href="https://www.googleapis.com/auth/plus.login">https://www.googleapis.com/auth/plus.login</a>

and the endpoint is - <a href="https://www.googleapis.com/plus/v1/people/">https://www.googleapis.com/plus/v1/people/</a>{userId} - userId can be just 'me' for currently logged in user.

blocks|key|259242|text|我正在使用Google+API+for+.Net，但毫无疑问，您可以使用其他版本的API找到相同的方法来获取此信息。正如user872858提到的，scope+userinfo.profile已被弃用(google+article)。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|259243|为了获取用户配置文件信息，我使用以下代码(从google's+example改写的部分)：|259244|IAuthorizationCodeFlow+flow+=+new+GoogleAuthorizationCodeFlow(
++++++++++++++++++++++++++++++++++new+GoogleAuthorizationCodeFlow.Initializer
++++++++++++++++++++++++++++++++++++++{
++++++++++++++++++++++++++++++++++++++++++++ClientSecrets+=+Secrets,
++++++++++++++++++++++++++++++++++++++++++++Scopes+=+new[]+{+PlusService.Scope.PlusLogin,"https://www.googleapis.com/auth/plus.profile.emails.read"++}
+++++++++++++++++++++++++++++++++++++++});++++
TokenResponse+_token+=+flow.ExchangeCodeForTokenAsync("",+code,+"postmessage",+
++++++++++++++++++++++++++++++CancellationToken.None).Result;

++++++++++++++++++++//+Create+an+authorization+state+from+the+returned+token.
++++++++++++++++++++context.Session["authState"]+=+_token;

++++++++++++++++++++//+Get+tokeninfo+for+the+access+token+if+you+want+to+verify.
++++++++++++++++++++Oauth2Service+service+=+new+Oauth2Service(
+++++++++++++++++++++new+Google.Apis.Services.BaseClientService.Initializer());
++++++++++++++++++++Oauth2Service.TokeninfoRequest+request+=+service.Tokeninfo();
++++++++++++++++++++request.AccessToken+=+_token.AccessToken;
++++++++++++++++++++Tokeninfo+info+=+request.Execute();
++++++++++++++++++++if+(info.VerifiedEmail.HasValue+&&+info.VerifiedEmail.Value)
++++++++++++++++++++{
++++++++++++++++++++++++flow+=+new+GoogleAuthorizationCodeFlow(
++++++++++++++++++++++++++++++++++++new+GoogleAuthorizationCodeFlow.Initializer
+++++++++++++++++++++++++++++++++++++++++{
+++++++++++++++++++++++++++++++++++++++++++++ClientSecrets+=+Secrets,
+++++++++++++++++++++++++++++++++++++++++++++Scopes+=+new[]+{+PlusService.Scope.PlusLogin+}
++++++++++++++++++++++++++++++++++++++++++});

++++++++++++++++++++++++UserCredential+credential+=+new+UserCredential(flow,+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++"me",+_token);
++++++++++++++++++++++++_token+=+credential.Token;
++++++++++++++++++++++++_ps+=+new+PlusService(
++++++++++++++++++++++++++++++new+Google.Apis.Services.BaseClientService.Initializer()
+++++++++++++++++++++++++++++++{
+++++++++++++++++++++++++++++++++++ApplicationName+=+"Your+app+name",
+++++++++++++++++++++++++++++++++++HttpClientInitializer+=+credential
+++++++++++++++++++++++++++++++});
++++++++++++++++++++++++Person+userProfile+=+_ps.People.Get("me").Execute();
++++++++++++++++++++}|code-block|syntax|javascript|259245|然后，您可以使用userProfile访问几乎任何内容。|259246|更新:要让这段代码正常工作，你必须在谷歌登录按钮上使用合适的作用域。例如我的按钮：|259247|+++++<button+class="g-signin"
+++++++++++++data-scope="https://www.googleapis.com/auth/plus.login+https://www.googleapis.com/auth/plus.profile.emails.read"
+++++++++++++data-clientid="646361778467-nb2uipj05c4adlk0vo66k96bv8inqles.apps.googleusercontent.com"
+++++++++++++data-accesstype="offline"
+++++++++++++data-redirecturi="postmessage"
+++++++++++++data-theme="dark"
+++++++++++++data-callback="onSignInCallback"
+++++++++++++data-cookiepolicy="single_host_origin"
+++++++++++++data-width="iconOnly">
+++++</button>|259248|entityMap|0|LINK|mutability|MUTABLE|url|https://developers.google.com/%2B/api/oauth#login-scopes|1|https://developers.google.com/%2B/quickstart/csharp^0|1O|A|2T|E|0|0|M|G|1|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@$9|15|A|16|1|17]]|E|$]]|$1|F|3|G|5|6|7|18|8|@]|D|@$9|19|A|1A|1|1B]]|E|$]]|$1|H|3|I|5|J|7|1C|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|1D|8|@]|D|@]|E|$]]|$1|O|3|P|5|6|7|1E|8|@]|D|@]|E|$]]|$1|Q|3|R|5|J|7|1F|8|@]|D|@]|E|$K|L]]|$1|S|3|-4|5|6|7|1G|8|@]|D|@]|E|$]]]|T|$U|$5|V|W|X|E|$Y|Z]]|10|$5|V|W|X|E|$Y|11]]]]

I am using Google API for .Net, but no doubt you can find the same way to obtain this information using other version of API.
As user872858 mentioned, scope userinfo.profile has been deprecated (<a href="https://developers.google.com/+/api/oauth#login-scopes" rel="nofollow">google article</a>) .

To obtain user profile info I use following code (re-written part from <a href="https://developers.google.com/+/quickstart/csharp" rel="nofollow">google's example</a>):

<pre><code>IAuthorizationCodeFlow flow = new GoogleAuthorizationCodeFlow(
 new GoogleAuthorizationCodeFlow.Initializer
 {
 ClientSecrets = Secrets,
 Scopes = new[] { PlusService.Scope.PlusLogin,"https://www.googleapis.com/auth/plus.profile.emails.read" }
 }); 
TokenResponse _token = flow.ExchangeCodeForTokenAsync("", code, "postmessage", 
 CancellationToken.None).Result;

 // Create an authorization state from the returned token.
 context.Session["authState"] = _token;

 // Get tokeninfo for the access token if you want to verify.
 Oauth2Service service = new Oauth2Service(
 new Google.Apis.Services.BaseClientService.Initializer());
 Oauth2Service.TokeninfoRequest request = service.Tokeninfo();
 request.AccessToken = _token.AccessToken;
 Tokeninfo info = request.Execute();
 if (info.VerifiedEmail.HasValue &amp;&amp; info.VerifiedEmail.Value)
 {
 flow = new GoogleAuthorizationCodeFlow(
 new GoogleAuthorizationCodeFlow.Initializer
 {
 ClientSecrets = Secrets,
 Scopes = new[] { PlusService.Scope.PlusLogin }
 });

 UserCredential credential = new UserCredential(flow, 
 "me", _token);
 _token = credential.Token;
 _ps = new PlusService(
 new Google.Apis.Services.BaseClientService.Initializer()
 {
 ApplicationName = "Your app name",
 HttpClientInitializer = credential
 });
 Person userProfile = _ps.People.Get("me").Execute();
 }
</code></pre>

Than, you can access almost anything using userProfile.

UPDATE: To get this code working you have to use appropriate scopes on google sign in button. For example my button:

<pre><code> &lt;button class="g-signin"
 data-scope="https://www.googleapis.com/auth/plus.login https://www.googleapis.com/auth/plus.profile.emails.read"
 data-clientid="646361778467-nb2uipj05c4adlk0vo66k96bv8inqles.apps.googleusercontent.com"
 data-accesstype="offline"
 data-redirecturi="postmessage"
 data-theme="dark"
 data-callback="onSignInCallback"
 data-cookiepolicy="single_host_origin"
 data-width="iconOnly"&gt;
 &lt;/button&gt;
</code></pre>

blocks|key|260305|text|我正在使用PHP，并通过使用1.1.4版的google-api-php-client解决了这个问题|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|260306|假设使用以下代码将用户重定向到Google身份验证页面：|260307|+$client+=+new+Google_Client();
+$client->setAuthConfigFile('/path/to/config/file/here');
+$client->setRedirectUri('https://redirect/url/here');
+$client->setAccessType('offline');+//optional
+$client->setScopes(['profile']);+//or+email
+$auth_url+=+$client->createAuthUrl();
+header('Location:+'+.+filter_var($auth_url,+FILTER_SANITIZE_URL));
+exit();|code-block|syntax|javascript|260308|假设向redirect_url返回了有效的身份验证码，则以下代码将从该身份验证码生成令牌并提供基本配置文件信息：|260309|+//assuming+a+successful+authentication+code+is+return
+$authentication_code+=+'code-returned-by-google';
+$client+=+new+Google_Client();
+//....+configure+$client+object+code+goes+here
+$client->authenticate($authentication_code);
+$token_data+=+$client->getAccessToken();

+//get+user+email+address
+$google_oauth+=new+Google_Service_Oauth2($client);
+$google_account_email+=+$google_oauth->userinfo->get()->email;
+//$google_oauth->userinfo->get()->familyName;
+//$google_oauth->userinfo->get()->givenName;
+//$google_oauth->userinfo->get()->name;
+//$google_oauth->userinfo->get()->gender;
+//$google_oauth->userinfo->get()->picture;+//profile+picture|260310|但是，不返回位置。New+YouTube+accounts+don't+have+YouTube+specific+usernames|260311|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/google/google-api-php-client|1|https://support.google.com/youtube/answer/1637615?hl=en-GB^0|5|3|L|L|0|0|0|0|3|C|0|0|9|1M|1|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@$9|15|A|16|1|17]]|E|$]]|$1|F|3|G|5|6|7|18|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|19|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|1A|8|@$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|O|3|P|5|J|7|1D|8|@]|D|@]|E|$K|L]]|$1|Q|3|R|5|6|7|1E|8|@]|D|@$9|1F|A|1G|1|1H]]|E|$]]|$1|S|3|-4|5|6|7|1I|8|@]|D|@]|E|$]]]|T|$U|$5|V|W|X|E|$Y|Z]]|10|$5|V|W|X|E|$Y|11]]]]

I'm using <code>PHP</code> and solved this by using version 1.1.4 of <a href="https://github.com/google/google-api-php-client" rel="noreferrer">google-api-php-client</a>

Assuming the following code is used to redirect a user to the Google authentication page:

<pre><code> $client = new Google_Client();
 $client-&gt;setAuthConfigFile('/path/to/config/file/here');
 $client-&gt;setRedirectUri('https://redirect/url/here');
 $client-&gt;setAccessType('offline'); //optional
 $client-&gt;setScopes(['profile']); //or email
 $auth_url = $client-&gt;createAuthUrl();
 header('Location: ' . filter_var($auth_url, FILTER_SANITIZE_URL));
 exit();
</code></pre>

Assuming a valid authentication code is returned to the <code>redirect_url</code>, the following will generate a token from the authentication code as well as provide basic profile information:

<pre><code> //assuming a successful authentication code is return
 $authentication_code = 'code-returned-by-google';
 $client = new Google_Client();
 //.... configure $client object code goes here
 $client-&gt;authenticate($authentication_code);
 $token_data = $client-&gt;getAccessToken();

 //get user email address
 $google_oauth =new Google_Service_Oauth2($client);
 $google_account_email = $google_oauth-&gt;userinfo-&gt;get()-&gt;email;
 //$google_oauth-&gt;userinfo-&gt;get()-&gt;familyName;
 //$google_oauth-&gt;userinfo-&gt;get()-&gt;givenName;
 //$google_oauth-&gt;userinfo-&gt;get()-&gt;name;
 //$google_oauth-&gt;userinfo-&gt;get()-&gt;gender;
 //$google_oauth-&gt;userinfo-&gt;get()-&gt;picture; //profile picture
</code></pre>

However, location is not returned. <a href="https://support.google.com/youtube/answer/1637615?hl=en-GB" rel="noreferrer">New YouTube accounts don't have YouTube specific usernames</a>

blocks|key|3158094|text|如果您在客户端web环境中，新的auth2+javascript+API包含一个非常需要的getBasicProfile()函数，该函数返回用户的姓名、电子邮件和图像URL。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3158095|https://developers.google.com/identity/sign-in/web/reference#googleusergetbasicprofile|3158096|entityMap|0|LINK|mutability|MUTABLE|url^0|19|H|0|0|2E|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|R|8|@]|D|@$9|S|A|T|1|U]]|E|$]]|$1|H|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|I|$J|$5|K|L|M|E|$N|G]]]]

If you're in a client-side web environment, the new auth2 javascript API contains a much-needed <code>getBasicProfile()</code> function, which returns the user's name, email, and image URL. 

<a href="https://developers.google.com/identity/sign-in/web/reference#googleusergetbasicprofile" rel="nofollow">https://developers.google.com/identity/sign-in/web/reference#googleusergetbasicprofile</a>

blocks|key|3158154|text|有3个步骤需要运行。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3158155|3158156|从Google+API控制台注册您的应用程序的客户端id+|ordered-list-item|3158157|请您的最终用户同意使用在步骤2中获得的令牌使用此接口https://developers.google.com/identity/protocols/OpenIDConnect#sendauthrequest|offset|length|3158158|Use+google的oauth2+api+(如https://any-api.com/googleapis_com/oauth2/docs/userinfo/oauth2_userinfo_v2_me_get所述)。(尽管我仍然找不到如何正确填充“”参数)。|3158159|3158160|非常有趣的是，这种最简单的用法在任何地方都没有清楚地描述。我认为这是有危险的，你应该注意响应中的verified_email参数。因为如果我没有错的话，它可能会产生虚假的电子邮件来注册你的申请。(这只是我的解释，很可能我错了！)|style|CODE|3158161|我发现facebook的OAuth机制描述得非常清楚。|3158162|entityMap|0|LINK|mutability|MUTABLE|url|https://developers.google.com/identity/protocols/OpenIDConnect#sendauthrequest|1|https://any-api.com/googleapis_com/oauth2/docs/userinfo/oauth2_userinfo_v2_me_get^0|0|0|0|Q|26|0|0|O|29|1|0|0|1C|E|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|13|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|14|8|@]|9|@]|A|$]]|$1|F|3|G|5|E|7|15|8|@]|9|@$H|16|I|17|1|18]]|A|$]]|$1|J|3|K|5|E|7|19|8|@]|9|@$H|1A|I|1B|1|1C]]|A|$]]|$1|L|3|-4|5|6|7|1D|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1E|8|@$H|1F|I|1G|O|P]]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1H|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1I|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]|10|$5|V|W|X|A|$Y|11]]]]

There are 3 steps that needs to be run.

<ol>
<li>Register your app's client id from Google API console</li>
<li>Ask your end user to give consent using this api <a href="https://developers.google.com/identity/protocols/OpenIDConnect#sendauthrequest" rel="nofollow noreferrer">https://developers.google.com/identity/protocols/OpenIDConnect#sendauthrequest</a></li>
<li>Use google's oauth2 api as described at <a href="https://any-api.com/googleapis_com/oauth2/docs/userinfo/oauth2_userinfo_v2_me_get" rel="nofollow noreferrer">https://any-api.com/googleapis_com/oauth2/docs/userinfo/oauth2_userinfo_v2_me_get</a> using the token obtained in step 2. (Though still I could not find how to fill "fields" parameter properly).</li>
</ol>

It is very interesting that this simplest usage is not clearly described anywhere. And i believe there is a danger, you should pay attention to the <code>verified_email</code>parameter coming in the response. Because if I am not wrong it may yield fake emails to register your application. (This is just my interpretation, has a fair chance that I may be wrong!)

I find facebook's OAuth mechanics much much clearly described.

blocks|key|257338|text|如果你只想为你的web应用程序的访问者获取Google用户id，姓名和图片-这是我为2020年提供的纯PHP服务端解决方案，没有使用外部库-|type|unstyled|depth|inlineStyleRanges|entityRanges|data|257339|如果你阅读了谷歌的Using+OAuth+2.0+for+Web+Server+Applications指南(注意，谷歌喜欢更改指向自己文档的链接)，那么你只需执行两个步骤：|offset|length|257340|257341|向访问者呈现一个网页，请求同意将她的名字与您的web应用程序共享|ordered-list-item|257342|，然后将上述网页传递给您的web应用程序的“代码”带到您的web应用程序中，并从谷歌获取令牌(实际上是2个)。|257343|257344|其中一个返回的令牌名为"id_token“，其中包含访问者的用户id、姓名和照片。|257345|这是我编写的a+web+game的PHP代码。最初我使用Javascript+SDK，但后来我注意到，当只使用客户端SDK+(特别是用户id，这对我的游戏很重要)时，虚假的用户数据可能会被传递到我的web游戏中，所以我切换到在服务器端使用PHP：|257346|<?php

const+APP_ID+++++++=+'1234567890-abcdefghijklmnop.apps.googleusercontent.com';
const+APP_SECRET+++=+'abcdefghijklmnopq';

const+REDIRECT_URI+=+'https://the/url/of/this/PHP/script/';
const+LOCATION+++++=+'Location:+https://accounts.google.com/o/oauth2/v2/auth?';
const+TOKEN_URL++++=+'https://oauth2.googleapis.com/token';
const+ERROR++++++++=+'error';
const+CODE+++++++++=+'code';
const+STATE++++++++=+'state';
const+ID_TOKEN+++++=+'id_token';

#+use+a+"random"+string+based+on+the+current+date+as+protection+against+CSRF
$CSRF_PROTECTION+++=+md5(date('m.d.y'));

if+(isset($_REQUEST[ERROR])+&&+$_REQUEST[ERROR])+{
++++exit($_REQUEST[ERROR]);
}

if+(isset($_REQUEST[CODE])+&&+$_REQUEST[CODE]+&&+$CSRF_PROTECTION+==+$_REQUEST[STATE])+{
++++$tokenRequest+=+[
++++++++'code'++++++++++=>+$_REQUEST[CODE],
++++++++'client_id'+++++=>+APP_ID,
++++++++'client_secret'+=>+APP_SECRET,
++++++++'redirect_uri'++=>+REDIRECT_URI,
++++++++'grant_type'++++=>+'authorization_code',
++++];

++++$postContext+=+stream_context_create([
++++++++'http'+=>+[
++++++++++++'header'++=>+"Content-type:+application/x-www-form-urlencoded\r\n",
++++++++++++'method'++=>+'POST',
++++++++++++'content'+=>+http_build_query($tokenRequest)
++++++++]
++++]);

++++#+Step+#2:+send+POST+request+to+token+URL+and+decode+the+returned+JWT+id_token
++++$tokenResult+=+json_decode(file_get_contents(TOKEN_URL,+false,+$postContext),+true);
++++error_log(print_r($tokenResult,+true));
++++$id_token++++=+$tokenResult[ID_TOKEN];
++++#+Beware+-+the+following+code+does+not+verify+the+JWT+signature!+
++++$userResult++=+json_decode(base64_decode(str_replace('_',+'/',+str_replace('-',+'%2B',+explode('.',+$id_token)[1]))),+true);

++++$user_id+++++=+$userResult['sub'];
++++$given_name++=+$userResult['given_name'];
++++$family_name+=+$userResult['family_name'];
++++$photo+++++++=+$userResult['picture'];

++++if+($user_id+!=+NULL+&&+$given_name+!=+NULL)+{
++++++++#+print+your+web+app+or+game+here,+based+on+$user_id+etc.
++++++++exit();
++++}
}

$userConsent+=+[
++++'client_id'+++++=>+APP_ID,
++++'redirect_uri'++=>+REDIRECT_URI,
++++'response_type'+=>+'code',
++++'scope'+++++++++=>+'profile',
++++'state'+++++++++=>+$CSRF_PROTECTION,
];

#+Step+#1:+redirect+user+to+a+the+Google+page+asking+for+user+consent
header(LOCATION+.+http_build_query($userConsent));

?>|code-block|syntax|javascript|257347|您可以使用PHP库通过验证JWT签名来添加额外的安全性。对我来说，这是不必要的，因为我相信谷歌不会通过发送虚假的访问者数据来出卖我的小网络游戏。|257348|此外，如果你想获取访问者的更多个人数据，那么你需要第三步：|257349|const+USER_INFO++++=+'https://www.googleapis.com/oauth2/v3/userinfo?access_token=';
const+ACCESS_TOKEN+=+'access_token';+

#+Step+#3:+send+GET+request+to+user+info+URL
$access_token+=+$tokenResult[ACCESS_TOKEN];
$userResult+=+json_decode(file_get_contents(USER_INFO+.+$access_token),+true);|257350|或者，您可以代表用户获得更多权限-请参阅OAuth+2.0+Scopes+for+Google+APIs文档中的长长列表。|257351|最后，我的代码中使用的APP_ID和APP_SECRET常量-您可以从Google+API+console中获取它|257352|​|257353|📷|atomic|257354|257355|entityMap|0|LINK|mutability|MUTABLE|url|https://developers.google.com/identity/protocols/oauth2/web-server|1|https://slova.de/words/google/|2|https://developers.google.com/identity/protocols/oauth2/scopes|3|https://console.developers.google.com/|4|IMAGE|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/87155d2696416bed3da0d9bac6a3e3b6.png|imageAlt^0|0|9|17|0|0|0|0|0|0|0|6|A|1|0|0|0|0|0|K|W|2|0|Z|I|3|0|0|0|1|4|0|0^^$0|@$1|2|3|4|5|6|7|1V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1W|8|@]|9|@$D|1X|E|1Y|1|1Z]]|A|$]]|$1|F|3|-4|5|6|7|20|8|@]|9|@]|A|$]]|$1|G|3|H|5|I|7|21|8|@]|9|@]|A|$]]|$1|J|3|K|5|I|7|22|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|23|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|24|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|25|8|@]|9|@$D|26|E|27|1|28]]|A|$]]|$1|Q|3|R|5|S|7|29|8|@]|9|@]|A|$T|U]]|$1|V|3|W|5|6|7|2A|8|@]|9|@]|A|$]]|$1|X|3|Y|5|6|7|2B|8|@]|9|@]|A|$]]|$1|Z|3|10|5|S|7|2C|8|@]|9|@]|A|$T|U]]|$1|11|3|12|5|6|7|2D|8|@]|9|@$D|2E|E|2F|1|2G]]|A|$]]|$1|13|3|14|5|6|7|2H|8|@]|9|@$D|2I|E|2J|1|2K]]|A|$]]|$1|15|3|16|5|6|7|2L|8|@]|9|@]|A|$]]|$1|17|3|18|5|19|7|2M|8|@]|9|@$D|2N|E|2O|1|2P]]|A|$]]|$1|1A|3|16|5|6|7|2Q|8|@]|9|@]|A|$]]|$1|1B|3|-4|5|6|7|2R|8|@]|9|@]|A|$]]]|1C|$1D|$5|1E|1F|1G|A|$1H|1I]]|1J|$5|1E|1F|1G|A|$1H|1K]]|1L|$5|1E|1F|1G|A|$1H|1M]]|1N|$5|1E|1F|1G|A|$1H|1O]]|1P|$5|1Q|1F|1R|A|$1S|1T|1U|-4]]]]

If you only want to fetch the Google user id, name and picture for a visitor of your web app - here is my pure PHP service side solution for the year 2020 with no external libraries used -
If you read the <a href="https://developers.google.com/identity/protocols/oauth2/web-server" rel="nofollow noreferrer">Using OAuth 2.0 for Web Server Applications</a> guide by Google (and beware, Google likes to change links to its own documentation), then you have to perform only 2 steps:
<ol>
<li>Present the visitor a web page asking for the consent to share her name with your web app</li>
<li>Then take the &quot;code&quot; passed by the above web page to your web app and fetch a token (actually 2) from Google.</li>
</ol>
One of the returned tokens is called &quot;id_token&quot; and contains the user id, name and photo of the visitor.
Here is the PHP code of <a href="https://slova.de/words/google/" rel="nofollow noreferrer">a web game</a> by me. Initially I was using Javascript SDK, but then I have noticed that fake user data could be passed to my web game, when using client side SDK only (especially the user id, which is important for my game), so I have switched to using PHP on the server side:
<pre><code>&lt;?php

const APP_ID = '1234567890-abcdefghijklmnop.apps.googleusercontent.com';
const APP_SECRET = 'abcdefghijklmnopq';

const REDIRECT_URI = 'https://the/url/of/this/PHP/script/';
const LOCATION = 'Location: https://accounts.google.com/o/oauth2/v2/auth?';
const TOKEN_URL = 'https://oauth2.googleapis.com/token';
const ERROR = 'error';
const CODE = 'code';
const STATE = 'state';
const ID_TOKEN = 'id_token';

# use a &quot;random&quot; string based on the current date as protection against CSRF
$CSRF_PROTECTION = md5(date('m.d.y'));

if (isset($_REQUEST[ERROR]) &amp;&amp; $_REQUEST[ERROR]) {
 exit($_REQUEST[ERROR]);
}

if (isset($_REQUEST[CODE]) &amp;&amp; $_REQUEST[CODE] &amp;&amp; $CSRF_PROTECTION == $_REQUEST[STATE]) {
 $tokenRequest = [
 'code' =&gt; $_REQUEST[CODE],
 'client_id' =&gt; APP_ID,
 'client_secret' =&gt; APP_SECRET,
 'redirect_uri' =&gt; REDIRECT_URI,
 'grant_type' =&gt; 'authorization_code',
 ];

 $postContext = stream_context_create([
 'http' =&gt; [
 'header' =&gt; &quot;Content-type: application/x-www-form-urlencoded\r\n&quot;,
 'method' =&gt; 'POST',
 'content' =&gt; http_build_query($tokenRequest)
 ]
 ]);

 # Step #2: send POST request to token URL and decode the returned JWT id_token
 $tokenResult = json_decode(file_get_contents(TOKEN_URL, false, $postContext), true);
 error_log(print_r($tokenResult, true));
 $id_token = $tokenResult[ID_TOKEN];
 # Beware - the following code does not verify the JWT signature! 
 $userResult = json_decode(base64_decode(str_replace('_', '/', str_replace('-', '+', explode('.', $id_token)[1]))), true);

 $user_id = $userResult['sub'];
 $given_name = $userResult['given_name'];
 $family_name = $userResult['family_name'];
 $photo = $userResult['picture'];

 if ($user_id != NULL &amp;&amp; $given_name != NULL) {
 # print your web app or game here, based on $user_id etc.
 exit();
 }
}

$userConsent = [
 'client_id' =&gt; APP_ID,
 'redirect_uri' =&gt; REDIRECT_URI,
 'response_type' =&gt; 'code',
 'scope' =&gt; 'profile',
 'state' =&gt; $CSRF_PROTECTION,
];

# Step #1: redirect user to a the Google page asking for user consent
header(LOCATION . http_build_query($userConsent));

?&gt;
</code></pre>
You could use a PHP library to add additional security by verifying the JWT signature. For my purposes it was unnecessary, because I trust that Google will not betray my little web game by sending fake visitor data.
Also, if you want to get more personal data of the visitor, then you need a third step:
<pre><code>const USER_INFO = 'https://www.googleapis.com/oauth2/v3/userinfo?access_token=';
const ACCESS_TOKEN = 'access_token'; 

# Step #3: send GET request to user info URL
$access_token = $tokenResult[ACCESS_TOKEN];
$userResult = json_decode(file_get_contents(USER_INFO . $access_token), true);
</code></pre>
Or you could get more permissions on behalf of the user - see the long list at the <a href="https://developers.google.com/identity/protocols/oauth2/scopes" rel="nofollow noreferrer">OAuth 2.0 Scopes for Google APIs</a> doc.
Finally, the APP_ID and APP_SECRET constants used in my code - you get it from the <a href="https://console.developers.google.com/" rel="nofollow noreferrer">Google API console</a>:
<a href="https://i.stack.imgur.com/g4i2q.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/g4i2q.png" alt="screenshot" /></a>

blocks|key|257357|text|这是糟糕的文档/有更改。对于最新的端点，我会引用此https://developers.google.com/oauthplayground。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|257358|从2021开始，userinfo的正确端点是|style|CODE|257359|https://www.googleapis.com/oauth2/v1/userinfo|257360|所以一旦你得到了access_token，你就可以做|257361|curl+-X+GET+"https://www.googleapis.com/oauth2/v1/userinfo"+\
+++-H+"Authorization:+Bearer+<access_token>"|code-block|syntax|javascript|257362|重要提示：可以获取你需要的所有信息scope+of+openid+email+profile。|BOLD|257363|{
+'sub':+'<unique_id>',
+'name':+'<full>',
+'given_name':+'<first>',
+'family_name':+'<last>',
+'picture':+'<pic>',
+'email':+'<email>',
+'email_verified':+True,
+'locale':+'en'
}|257364|entityMap|0|LINK|mutability|MUTABLE|url|https://developers.google.com/oauthplayground^0|P|19|0|0|1|4|8|8|0|0|19|0|8|C|0|0|0|5|H|5|Q|K|0|0^^$0|@$1|2|3|4|5|6|7|13|8|@]|9|@$A|14|B|15|1|16]]|C|$]]|$1|D|3|E|5|6|7|17|8|@$A|18|B|19|F|G]|$A|1A|B|1B|F|G]]|9|@]|C|$]]|$1|H|3|I|5|6|7|1C|8|@$A|1D|B|1E|F|G]]|9|@]|C|$]]|$1|J|3|K|5|6|7|1F|8|@$A|1G|B|1H|F|G]]|9|@]|C|$]]|$1|L|3|M|5|N|7|1I|8|@]|9|@]|C|$O|P]]|$1|Q|3|R|5|6|7|1J|8|@$A|1K|B|1L|F|S]|$A|1M|B|1N|F|G]|$A|1O|B|1P|F|G]]|9|@]|C|$]]|$1|T|3|U|5|N|7|1Q|8|@]|9|@]|C|$O|P]]|$1|V|3|-4|5|6|7|1R|8|@]|9|@]|C|$]]]|W|$X|$5|Y|Z|10|C|$11|12]]]]

This is poorly document / there have been changes. I would reference this <a href="https://developers.google.com/oauthplayground" rel="noreferrer">https://developers.google.com/oauthplayground</a> for up to date endpoints.
As of <code>2021</code> the correct endpoint for <code>userinfo</code> is
<code>https://www.googleapis.com/oauth2/v1/userinfo</code>
So once you get the <code>access_token</code> you can do
<pre><code>curl -X GET &quot;https://www.googleapis.com/oauth2/v1/userinfo&quot; \
 -H &quot;Authorization: Bearer &lt;access_token&gt;&quot;
</code></pre>
Important: To get all the information you need <code>scope</code> of <code>openid email profile</code>.
<pre><code>{
 'sub': '&lt;unique_id&gt;',
 'name': '&lt;full&gt;',
 'given_name': '&lt;first&gt;',
 'family_name': '&lt;last&gt;',
 'picture': '&lt;pic&gt;',
 'email': '&lt;email&gt;',
 'email_verified': True,
 'locale': 'en'
}
</code></pre>

Is it possible to get information from user's profile via Google API? If it is possible, which API should I use? 

I'm interesting in such information:

<ul>
<li>Url to the user profile (e.g. <a href="https://profiles.google.com/115063121183536852887" rel="noreferrer">https://profiles.google.com/115063121183536852887</a>);</li>
<li>Gender (sex);</li>
<li>Profile photo.</li>
</ul>

Also it would be cool to get other information from user's profile.

Get user info via Google API

身份验证

验证码

服务器

OAuth

有没有可能通过Google API从用户资料中获取信息？如果可能，我应该使用哪个API？我对这些信息很感兴趣：指向用户配置文件的Url (例如，);Gender (性别)；个人资料照片。此外，这将是很酷的其他信息，从用户的个人资料。

问通过Google API获取用户信息
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问通过Google API获取用户信息EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问通过Google API获取用户信息
EN