尝试使用Google管理目录API来阅读Google群组(组织)的成员 - 它运行正常。当我尝试添加一个成员时,我得到了:
{ errors:
[ { domain: 'global',
reason: 'required',
message: 'Missing required field: member' } ],
code: 400,
message: 'Missing required field: member' }
我用Google搜索了错误,发现了this,this等问题以及其他一些无用的结果。
我查了一下,肯定不缺少范围或权限。
#!/usr/bin/python
import httplib2
import json
from oauth2client.client import SignedJwtAssertionCredentials
from urllib import urlencode
def get_group_members(group):
url = 'https://www.googleapis.com/admin/directory/v1/groups/{}/members'.format(group['email'])
return call_google_api("GET", url)
def add_group_member(group, payload=False):
url = 'https://www.googleapis.com/admin/directory/v1/groups/{}/members'.format(group)
return call_google_api("POST", url, payload)
def call_google_api(method, url, payload=False):
content = {}
try:
http = get_conn()
if payload:
(resp, content) = http.request(uri=url, method=method, body=urlencode(payload))
else:
(resp, content) = http.request(uri=url, method=method)
except Exception as e:
print "Failed to post request to [{}] due to: {}".format(url, e)
return json.loads(content)
def get_conn():
client_email = get_client_email_from_db()
with open(get_private_key_filename()) as f:
private_key = f.read()
oauth_scope = ['https://www.googleapis.com/auth/admin.directory.group.member',
'https://www.googleapis.com/auth/admin.directory.group',
]
credentials = SignedJwtAssertionCredentials(client_email, private_key, oauth_scope, sub='googleapi@organization.com')
http = httplib2.Http()
return credentials.authorize(http)
if __name__ == '__main__':
payload = {
"email": "test-user@organization.com",
"role": "MEMBER",
}
print "\n ---------------------------------- \n"
print "calling add_group_member('test-user@organization.com', 'test-group@organization.com')"
res = add_group_member("test-group@organization.com", payload)
print "\n ---------------------------------- \n"
注释:
我设法通过使用sdk apiclient.discovery.build
来实现我想要的,但仍然 - 我很好奇,问题是什么以及是否可以解决。
调试请求:
connect: (www.googleapis.com, 443)
send: 'POST /admin/directory/v1/groups/xxxx@xxxx.com/members HTTP/1.1\r\nHost: www.googleapis.com\r\nContent-Length: 38\r\ncontent-type: application/json\r\naccept-encoding: gzip, deflate\r\nauthorization: Bearer ya29.RAFzf3hyxvP0LuR4VdpqKr_dD0WzOcvXjn4eWV5Em6xJDissi4ieOZ2ZBRMOP-WLhvTrecBxgF_6sznc1GKSWHanvgYTh_EzcilsAN0f5jOiiMahOadG2v5ixBPL9GcqebRdz_kQc1y2iQ\r\nuser-agent: Python-httplib2/0.9 (gzip)\r\n\r\nrole=MEMBER&email=alfasi%40xxxx.com'
reply: 'HTTP/1.1 400 Bad Request\r\n'
header: Vary: Origin
header: Vary: X-Origin
header: Content-Type: application/json; charset=UTF-8
header: Content-Encoding: gzip
header: Date: Sat, 28 Mar 2015 23:14:47 GMT
header: Expires: Sat, 28 Mar 2015 23:14:47 GMT
header: Cache-Control: private, max-age=0
header: X-Content-Type-Options: nosniff
header: X-Frame-Options: SAMEORIGIN
header: X-XSS-Protection: 1; mode=block
header: Server: GSE
header: Alternate-Protocol: 443:quic,p=0.5
header: Transfer-Encoding: chunked
答案 0 :(得分:3)
由于Google API使用(仅限?)JSON编码,因此您的帖子数据不会被解析为所需的成员对象。您已经为响应加载了json,因此您只需要更改编码,并可选择明确指出:
if payload:
(resp, content) = http.request(uri=url, method=method, body=urlencode(payload))
# becomes:
if payload:
(resp, content) = http.request(uri=url, method=method, body=json.dumps(payload), headers={'Content-type':'application/json'})
答案 1 :(得分:0)
如果您是第一次尝试将用户添加到组中,则该角色必须是MEMBER。如果它不是它,它会给你这个错误 - 缺少必填字段:成员。
首先将用户添加为MEMBER,然后指定任何其他角色。