PHP中发起OAuth2.0 Token请求遇invalid_request错误求助

云原生阿岚

2026-6-27

解决cURL请求OAuth Token返回invalid_request的问题

排查关键点及修复方案：

1. 修正URL语法错误

你的代码里$url = my url '/identityiq/oauth2/token';是无效PHP语法，需替换为完整合法的URL，示例：

$url = 'https://your-actual-domain.com/identityiq/oauth2/token';

2. 调整HTTP请求头格式

CURLOPT_HTTPHEADER要求传入索引数组而非关联数组，修改header定义：

$headers = [
    "Content-Type: application/x-www-form-urlencoded"
];

3. 改用Basic Auth传递客户端凭证（多数OAuth服务要求此方式）

部分OAuth服务不支持将client_id和client_secret放在POST字段中，需通过Basic Auth头传递：

// 移除POST字段中的client_id和client_secret
$requestData = [
    'grant_type' => 'client_credentials'
];

// 构建Basic Auth认证头
$auth = base64_encode("$client_id:$client_secret");
$headers = [
    "Content-Type: application/x-www-form-urlencoded",
    "Authorization: Basic $auth"
];

4. 开启cURL错误调试

若问题仍存在，添加调试代码查看具体错误：

$response = curl_exec($ch);
if(curl_errno($ch)){
    echo 'Curl error: ' . curl_error($ch);
}
var_dump($response);

完整修复示例代码

$client_id = 'MY_CLIENT_ID';
$client_secret = 'MY_CLIENT_SECRET';
$url = 'https://your-actual-domain.com/identityiq/oauth2/token';

$requestData = [
    'grant_type' => 'client_credentials'
];

$ch = curl_init();

$auth = base64_encode("$client_id:$client_secret");
$headers = [
    "Content-Type: application/x-www-form-urlencoded",
    "Authorization: Basic $auth"
];

curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query($requestData));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // 生产环境建议开启SSL验证
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

$response = curl_exec($ch);
if(curl_errno($ch)){
    echo 'Curl error: ' . curl_error($ch);
}
var_dump($response);

curl_close($ch);