Question

我正在使用https://flask-oauthlib.readthedocs.io/en/latest/处理Google OAuth API。我能够连接和检索用户数据。但是获取用户组织名称仍然面临问题。

根据文档https://developers.google.com/admin-sdk/directory/v1/guides/manage-users，API应该返回组织名称。

“组织”：[{“名称”：“ Google Inc.”，“标题”：“ SWE”，
“ primary”：true，“ customType”：“”，“ description”：“软件工程师“}]，

但使用

SCOPES_ORGANISATIONS = ("https://www.googleapis.com/auth/admin.directory.user.readonly "
                        "https://www.googleapis.com/auth/admin.directory.orgunit.readonly")

app_ = oauth.remote_app(
    'google',
    consumer_key=GOOGLE_CLIENT_ID,
    consumer_secret=GOOGLE_CLIENT_SECRET,
    request_token_params={'scope': f'email profile {SCOPES_ORGANISATIONS}', 'prompt': 'login'},
    base_url='https://www.googleapis.com/oauth2/v1/',
    request_token_url=None,
    access_token_method='POST',
    access_token_url='https://accounts.google.com/o/oauth2/token',
    authorize_url='https://accounts.google.com/o/oauth2/auth')

GOOGLE_DIRECTORY_API = "https://www.googleapis.com/admin/directory/v1/users/{user_email}"

def get_profile(app_):
    url = GOOGLE_DIRECTORY_API.format(user_email=email)
    ret = app_.get(url)
    logger.info("Google api %s return, %r", url, ret.data)

    name = ret.data["organizations"][0]["name"]
    logger.info("Company name, %r", name)

    return name

返回的结果看起来像

{
 "kind": "admin#directory#user",
 "id": "xxxxxxxxxxxxxxx",
 "etag": "",
 "primaryEmail": "ali@xxxxxxx",
 "name": {
  "givenName": "Ali",
  "familyName": "xxxxx",
  "fullName": "xxxxx"
 },
 "isAdmin": true,
 "isDelegatedAdmin": false,
 "lastLoginTime": "2019-01-31T10:03:27.000Z",
 "creationTime": "2019-01-31T08:19:26.000Z",
 "agreedToTerms": true,
 "suspended": false,
 "archived": false,
 "changePasswordAtNextLogin": false,
 "ipWhitelisted": false,
 "emails": [
  {
   "address": "xxxxx",
   "primary": true
  },
  {
   "address": "xxxxx"
  }
 ],
 "nonEditableAliases": [
  "xxxxxx"
 ],
 "customerId": "xxxxxxxx",
 "orgUnitPath": "/",
 "isMailboxSetup": true,
 "isEnrolledIn2Sv": false,
 "isEnforcedIn2Sv": false,
 "includeInGlobalAddressList": true
}

Answer 1

Directory API, User organizations- name field. Where does it come from?向我指出解决方案。

现在我可以通过以下方式检索组织名称：

GOOGLE_DIRECTORY_API = "https://www.googleapis.com/admin/directory/v1/users/{user_email}"
GOOGLE_CUSTOMER_API = "https://www.googleapis.com/admin/directory/v1/customers/{customer_id}"

def get_profile(app_):
    url = GOOGLE_DIRECTORY_API.format(user_email=email)
    ret = app_.get(url)
    logger.info("Google api %s return, %r", url, ret.data)

    # https://stackoverflow.com/q/39571207/280485
    # the organization data may be in the user data
    if ret.data.get("organizations"):
        name = ret.data.get("organizations")[0].get("name")
        logger.info("Company name, %r", name)
        return name

    # in case of not retrieve organization data from customer (the same use) API
    customer_id = ret.data["customerId"]

    url = GOOGLE_CUSTOMER_API.format(customer_id=customer_id)
    ret = app_.get(url)

    logger.info("Google api %s return, %r", url, ret.data)

    name = ret.data["postalAddress"]["organizationName"]
    logger.info("Company name, %r", name)

    return name

从Admin Directory API检索组织名称

1 个答案: