转售API-权限不足

时间:2018-11-14 15:03:27

标签: php google-admin-sdk gsuite google-reseller-api

我正在尝试创建一个新客户并将G-Suite订阅附加到该客户,但是似乎无法做到这一点。

我目前在哪里

  • 可以创建一个Google客户对象
  • 可以检查该域中是否已经存在客户
  • 可以创建客户对象

指南:

错误代码:

  

未捕获的Google_Service_Exception:   {“ error”:{“ errors”:[{“ domain”:“ global”,“ reason”:“ insufficientPermissions”,“ message”:“ Insufficient   权限“}]

我怀疑这与许可范围有关(是的,确实,我刚刚说过)。问题是我正在遵循Google的指南,所以我不确定问题出在哪里。

当前范围:

function get_client()
{
    $OAUTH2_SCOPES = [
        Google_Service_Reseller::APPS_ORDER,
        Google_Service_SiteVerification::SITEVERIFICATION,
        Google_Service_Directory::ADMIN_DIRECTORY_USER,
    ];

    $client = new Google_Client();
    $client->setApplicationName('test');
    $client->setScopes($OAUTH2_SCOPES);
    $client->setAuthConfig(__DIR__ . '/credentials.json');
    $client->setAccessType('offline');
    $client->setPrompt('select_account consent');

    // Load previously authorized token from a file, if it exists.
    // The file token.json stores the user's access and refresh tokens, and is
    // created automatically when the authorization flow completes for the first
    // time.
    $tokenPath = 'token.json';
    if(file_exists($tokenPath)) 
    {
        $accessToken = json_decode(file_get_contents($tokenPath), true);
        $client->setAccessToken($accessToken);
    }

    // If there is no previous token or it's expired.
    if($client->isAccessTokenExpired()) 
    {
        // Refresh the token if possible, else fetch a new one.
        if ($client->getRefreshToken()) 
        {
               $client->fetchAccessTokenWithRefreshToken($client->getRefreshToken());
        } 
        else 
        {
            // Request authorization from the user.
            $authUrl = $client->createAuthUrl();
            printf("Open the following link in your browser:\n%s\n", $authUrl);
            print 'Enter verification code: ';
            $authCode = 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx';

            // Exchange authorization code for an access token.
            $accessToken = $client->fetchAccessTokenWithAuthCode($authCode);
            $client->setAccessToken($accessToken);

            // Check to see if there was an error.
            if(array_key_exists('error', $accessToken))
            {
                throw new Exception(join(', ', $accessToken));
            }
        }
        // Save the token to a file.
        if (!file_exists(dirname($tokenPath))) 
        {
            mkdir(dirname($tokenPath), 0700, true);
        }
        file_put_contents($tokenPath, json_encode($client->getAccessToken()));
    }

    return $client;
}

1 个答案:

答案 0 :(得分:0)

我设法自己找出解决方案。

问题:
权限不足

解决方案:
令牌文件未更新,具有新添加的权限-因此删除并重新创建cred.json文件-解决了问题:)