使用服务帐户身份验证/关键字失败的AdminSettings API [英] AdminSettings API using service account auth/keyword failures
问题描述
通过 Python 中的服务帐户，使用AdminSettings API尝试获取用户的域名"GetCurrentNumberOfUsers()".启用委派的权限和范围，但会出错.我已将服务帐户用于Calendar API，Directory API，EmailSettings API，但不适用于AdminSettings.在以下位置尝试了示例代码: github.com/Khan/gdata-python-client/blob/master/samples/apps/adminsettings_example.py ，但在为管理员帐户使用正确的凭据时出现需要授权"错误: API客户端访问权限
Trying to retreive domain number of users, 'GetCurrentNumberOfUsers()', using AdminSettings API via a Service Account in Python. Enabled delegation wide authority and scope, but getting errors. I have used service account for Calendar API, Directory API, EmailSettings API, but not working for AdminSettings. Tried sample code at: github.com/Khan/gdata-python-client/blob/master/samples/apps/adminsettings_example.py but get 'Authorization required' error while using correct credentials for admin account: API Client Acccess
from oauth2client.client import SignedJwtAssertionCredentials
import gdata.gauth
import gdata.apps.service
import gdata.apps.adminsettings.service
SERVICE_ACCOUNT_EMAIL = "XXXXXXXXXXXXX-ebirq08jvhldahbb482u8a1otu9n3l8p.apps.googleusercontent.com"
SERVICE_ACCOUNT_PKCS12_FILE_PATH = 'gapi_admin/privatekey.p12'
f = file(SERVICE_ACCOUNT_PKCS12_FILE_PATH, 'rb')
key = f.read()
f.close()
credentials = SignedJwtAssertionCredentials(SERVICE_ACCOUNT_EMAIL, key, scope='https://apps-apis.google.com/a/feeds/domain/', sub='admin@xxxtestmail.edu')
auth2token = gdata.gauth.OAuth2TokenFromCredentials(credentials)
service = gdata.apps.adminsettings.service.AdminSettingsService(source="testApp", domain='xxxtestmail.edu')
service = auth2token.authorize(service)
print service.GetCurrentNumberOfUsers()
#output
#TypeError: new_request() takes exactly 1 non-keyword argument (2 given)
在OAuth2 Playground中运行正常，请查看屏幕截图.
works fine in OAuth2 Playground, view Screenshot.
推荐答案
旧的GData Python库服务对象实际上并不支持您需要使用的OAuth 2.0.但是，您可以在此处破解访问令牌.尝试类似的东西:
The old GData Python library service objects don't actually support OAuth 2.0 which is what you need to be using. However you can hack a access token on there. Try something like:
credentials = SignedJwtAssertionCredentials(SERVICE_ACCOUNT_EMAIL, key, scope='https://apps-apis.google.com/a/feeds/domain/', sub='admin@xxxtestmail.edu')
credentials.refresh(httplib2.Http())
service = gdata.apps.adminsettings.service.AdminSettingsService(source="testApp", domain='xxxtestmail.edu')
service.additional_headers[u'Authorization'] = u'Bearer {0}'.format(credentials.access_token)
print service.GetCurrentNumberOfUsers()
这篇关于使用服务帐户身份验证/关键字失败的AdminSettings API的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
