Facing timeout issue for https://www.googleapis.com/oauth2/v4/token while generating oauth access token using google-auth-library #1786

LMOG10 · 2024-04-04T11:34:08Z

I have created an nodejs api to generate oauth2 accessToken using google-auth-library for FCM HTTP V1 API.

This api generates an oauth2 accessToken which will then be used by my react app to make a request to FCM HTTP V1 API.

The api code works fine on my local machine gives the excepted output. But when this code is deployed on server I am facing timeout issue for https://www.googleapis.com/oauth2/v4/token this endpoint.

Code :-
module.exports.generateToken = async function (transactionId) {
try
{
const SCOPES = "https://www.googleapis.com/auth/firebase.messaging";
const currentTimeZone = new Date(Date.now());
currentTimeZone.setHours( currentTimeZone.getHours() + config.AccessTokenExpiryTime );
const auth = new GoogleAuth({
credentials: {
client_email: config.client_email,
private_key: config.private_key,
},
scopes: SCOPES,
});

const client = await auth.getClient();
const accessToken = await client.getAccessToken();
globalaccessToken = accessToken.token;
tokenExpiry = currentTimeZone;

loggerDetail.debug(transactionId + " AccessToken Retrieved Successfully ");

return {
  accessTokenValue: globalaccessToken,
  tokenExpiration: tokenExpiry,
};

}catch (error) {
loggerDetail.debug( transactionId + " Failed to retrieve access token: " + error.message );
}
};

####################### Error while token generation: GaxiosError: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.665 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.666 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 +05:30: 4|MyTest UI Notification Get AccessToken | 20240313 16:46:06.667 request to https://www.googleapis.com/oauth2/v4/token failed, reason: connect ETIMEDOUT 142.250.192.170:443
at Gaxios._request (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/gaxios/build/src/gaxios.js:148:19)
at processTicksAndRejections (node:internal/process/task_queues:96:5)
at async GoogleToken.requestToken (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/gtoken/build/src/index.js:230:23)
at async GoogleToken.getTokenAsync (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/gtoken/build/src/index.js:137:20)
at async JWT.refreshTokenNoCache (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/google-auth-library/build/src/auth/jwtclient.js:165:23)
at async JWT.refreshAccessTokenAsync (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/google-auth-library/build/src/auth/oauth2client.js:209:19)
at async JWT.getAccessTokenAsync (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/google-auth-library/build/src/auth/oauth2client.js:238:23)
at async Object.module.exports.generateToken (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/service/notificationGetAccessTokenService.js:210:25)
at async Object.module.exports.invokeGetAccessToken (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/service/notificationGetAccessTokenService.js:49:14)
at async notificationGetAccessToken (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/controllers/notificationGetAccessTokenController.js:54:53) {
config: {
method: 'POST',
url: 'https://www.googleapis.com/oauth2/v4/token',
data: {
grant_type: '< - See errorRedactor option in gaxios for configuration>.',
assertion: '< - See errorRedactor option in gaxios for configuration>.'
},
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
'User-Agent': 'google-api-nodejs-client/9.2.0',
'x-goog-api-client': 'gl-node/16.15.0',
Accept: 'application/json'
},
responseType: 'json',
paramsSerializer: [Function: paramsSerializer],
body: '< - See errorRedactor option in gaxios for configuration>.',
validateStatus: [Function: validateStatus],
errorRedactor: [Function: defaultErrorRedactor]
},
response: undefined,
error: FetchError: request to https://www.googleapis.com/oauth2/v4/token failed, reason: connect ETIMEDOUT 142.250.192.170:443
at ClientRequest. (/opt/MyTest/MyTest-ui/apis/MyTest-notification-get-accessToken/node_modules/node-fetch/lib/index.js:1501:11)
at ClientRequest.emit (node:events:527:28)
at TLSSocket.socketErrorListener (node:_http_client:454:9)
at TLSSocket.emit (node:events:527:28)
at emitErrorNT (node:internal/streams/destroy:157:8)
at emitErrorCloseNT (node:internal/streams/destroy:122:3)
at processTicksAndRejections (node:internal/process/task_queues:83:21) {
type: 'system',
errno: 'ETIMEDOUT',
code: 'ETIMEDOUT'
},
code: 'ETIMEDOUT'
+05:30: }

Node version on server :- v16.0.0
Node version on my local machine :- v16.20.0
library version :- ^9.6.3

Tried with library version : ^9.2 was facing same issue then migrated to 9.6.3

The text was updated successfully, but these errors were encountered:

danielbankhead · 2024-04-08T22:27:04Z

This is currently tracked via:

Slow response times when obtaining Domain Wide Delegation token and during inbound Authorization header validation #1756

I should have some updates shortly to resolve this issue.

LMOG10 · 2024-04-15T09:56:11Z

Does it means my issue has been resolved ?

LMOG10 · 2024-04-15T10:07:05Z

Can you provide node js implementation of google-auth-library for oauth 2.0 access token generation ?

danielbankhead · 2024-04-15T21:56:03Z

google-auth-library-nodejs/src/auth/oauth2client.ts

Lines 634 to 685 in b2eae07

    
             /** 
        
              * Gets the access token for the given code. 
        
              * @param code The authorization code. 
        
              * @param callback Optional callback fn. 
        
              */ 
        
             getToken(code: string): Promise<GetTokenResponse>; 
        
             getToken(options: GetTokenOptions): Promise<GetTokenResponse>; 
        
             getToken(code: string, callback: GetTokenCallback): void; 
        
             getToken(options: GetTokenOptions, callback: GetTokenCallback): void; 
        
             getToken( 
        
               codeOrOptions: string | GetTokenOptions, 
        
               callback?: GetTokenCallback 
        
             ): Promise<GetTokenResponse> | void { 
        
               const options = 
        
                 typeof codeOrOptions === 'string' ? {code: codeOrOptions} : codeOrOptions; 
        
               if (callback) { 
        
                 this.getTokenAsync(options).then( 
        
                   r => callback(null, r.tokens, r.res), 
        
                   e => callback(e, null, e.response) 
        
                 ); 
        
               } else { 
        
                 return this.getTokenAsync(options); 
        
               } 
        
             } 
        
             private async getTokenAsync( 
        
               options: GetTokenOptions 
        
             ): Promise<GetTokenResponse> { 
        
               const url = this.endpoints.oauth2TokenUrl.toString(); 
        
               const values = { 
        
                 code: options.code, 
        
                 client_id: options.client_id || this._clientId, 
        
                 client_secret: this._clientSecret, 
        
                 redirect_uri: options.redirect_uri || this.redirectUri, 
        
                 grant_type: 'authorization_code', 
        
                 code_verifier: options.codeVerifier, 
        
               }; 
        
               const res = await this.transporter.request<CredentialRequest>({ 
        
                 ...OAuth2Client.RETRY_CONFIG, 
        
                 method: 'POST', 
        
                 url, 
        
                 data: querystring.stringify(values), 
        
                 headers: {'Content-Type': 'application/x-www-form-urlencoded'}, 
        
               }); 
        
               const tokens = res.data as Credentials; 
        
               if (res.data && res.data.expires_in) { 
        
                 tokens.expiry_date = new Date().getTime() + res.data.expires_in * 1000; 
        
                 delete (tokens as CredentialRequest).expires_in; 
        
               } 
        
               this.emit('tokens', tokens); 
        
               return {tokens, res}; 
        
             }

Daudxu · 2024-04-24T08:30:45Z

error: FetchError: request to https://www.googleapis.com/oauth2/v1/certs failed, reason: connect ETIMEDOUT 142.251.43.10:443

Daudxu · 2024-04-24T08:31:29Z

error: FetchError: request to https://oauth2.googleapis.com/token failed, reason: connect ETIMEDOUT 142.251.43.10:443

LMOG10 · 2024-04-24T13:10:58Z

I am using service-account.json credentials to generate a client and use that client to generate access token.

Provide node js implementation for above scenario where instead of client id & secret we are using service-account.json credentials

zhanzengyu · 2024-07-01T02:21:24Z

@danielbankhead any updates?

danielbankhead · 2024-07-01T21:10:30Z

This particular issue should be resolved as of 9.8.0+ with the following PR:

feat: Enable Retries For Auth Requests #1791

Is anyone experiencing this issue in the latest release?

LMOG10 added priority: p2 Moderately-important priority. Fix may not be included in next release. type: bug Error or flaw in code with unintended results or allowing sub-optimal usage patterns. labels Apr 4, 2024

danielbankhead closed this as not planned Won't fix, can't repro, duplicate, stale Apr 8, 2024

danielbankhead mentioned this issue Apr 10, 2024

feat: Enable Retries For Auth Requests #1791

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Facing timeout issue for https://www.googleapis.com/oauth2/v4/token while generating oauth access token using google-auth-library #1786

Facing timeout issue for https://www.googleapis.com/oauth2/v4/token while generating oauth access token using google-auth-library #1786

LMOG10 commented Apr 4, 2024

danielbankhead commented Apr 8, 2024

LMOG10 commented Apr 15, 2024

LMOG10 commented Apr 15, 2024

danielbankhead commented Apr 15, 2024

Daudxu commented Apr 24, 2024 •

edited

Loading

Daudxu commented Apr 24, 2024

LMOG10 commented Apr 24, 2024

zhanzengyu commented Jul 1, 2024

danielbankhead commented Jul 1, 2024

Facing timeout issue for https://www.googleapis.com/oauth2/v4/token while generating oauth access token using google-auth-library #1786

Facing timeout issue for https://www.googleapis.com/oauth2/v4/token while generating oauth access token using google-auth-library #1786

Comments

LMOG10 commented Apr 4, 2024

danielbankhead commented Apr 8, 2024

LMOG10 commented Apr 15, 2024

LMOG10 commented Apr 15, 2024

danielbankhead commented Apr 15, 2024

Daudxu commented Apr 24, 2024 • edited Loading

Daudxu commented Apr 24, 2024

LMOG10 commented Apr 24, 2024

zhanzengyu commented Jul 1, 2024

danielbankhead commented Jul 1, 2024

Daudxu commented Apr 24, 2024 •

edited

Loading