Google Apps Marketplace-通过增量授权添加范围 [英] Google Apps Marketplace - Adding scopes via Incremental authorisation

问题描述

我们有一个现有的网络应用，该应用将Google的OAuth 2.0 API用于Admin Directory，Drive等管理任务，例如备份和审核.

We have an existing web app which uses Google's OAuth 2.0 APIs for Admin Directory, Drive, etc for administrative tasks like backup and audit.

当前，我们让客户独立地将备份和审核作为模块"安装，并且每个客户都有单独的client_id和单独的OAuth范围(即，一个用于Admin目录，另一个用于Drive).

Currently we let our customers install backup and audit independently as 'modules' and each have separate client_ids and separate OAuth scopes (i.e. Admin directory for one, Drive for another).

我们希望将我们的应用程序引入Google Apps Marketplace，并利用Google登录(OpenID Connect)，使用具有域范围授权的服务帐户，但仍然让我们的客户仅授权他们想要使用的范围

We want to bring our app to the Google Apps Marketplace, and take advantage of Google Sign In (OpenID Connect), use service accounts with domain-wide delegation of authority, but still let our customers only authorize scopes they want to use.

当用户想要启用某些功能时，我们可以向Google Apps Marketplace应用添加新范围吗?

Can we add new scopes to Google Apps Marketplace apps when a user wants to enable a certain feature?

最佳实践准则(1)指出，我们应该通过Marketplace SDK范围部分先请求我们可能想要的所有范围，但我们只希望请求客户实际使用的范围.

The best practise guidelines (1) indicate that we should request all scopes we might want up front via the Marketplace SDK scopes section but we want to only request the scopes our customers are going to actually use.

(1) https://developers.google.com/apps-marketplace/practices #1_complete_the_listing_review_request_form

推荐答案

您可以添加新的作用域.您的客户仍然必须通过ADMIN控制台为新作用域授予访问权限.

You can add new scopes. Your customer will still have to grant access though for the new scope/s from the ADMIN console.

这篇关于Google Apps Marketplace-通过增量授权添加范围的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！