Question

我正在尝试使用本地凭据（即不是服务帐户）阅读Google Spreadsheet。我基本上是在做：

from googleapiclient.discovery import build

service = build('sheets', 'v4')
request = sheet_service.spreadsheets().values().get(spreadsheetId=SPREADSHEET_ID, range='{}!A1:a4'.format(SHEET_NAME))
result = request.execute()
values = result.get('values', [])

但是我遇到以下错误：

Traceback (most recent call last):
  File "./update_incidents_tracker.py", line 54, in <module>
    sys.exit(main())
  File "./update_incidents_tracker.py", line 48, in main
    result = request.execute()
  File "/home/filip/.virtualenvs/monitoring-tools/lib/python3.6/site-packages/googleapiclient/_helpers.py", line 134, in positional_wrapper
    return wrapped(*args, **kwargs)
  File "/home/filip/.virtualenvs/monitoring-tools/lib/python3.6/site-packages/googleapiclient/http.py", line 898, in execute
    raise HttpError(resp, content, uri=self.uri)
googleapiclient.errors.HttpError: <HttpError 403 when requesting https://sheets.googleapis.com/v4/spreadsheets/1lTcQ3WknG_2oZvy9O9LEbgAzoykOWaheYSaDkkV21wE/values/Incidents%21A1%3Aa4?alt=json returned "Request had insufficient authentication scopes.">

我找不到设置本地（gcloud SDK）凭据范围的方法。如何设置适当的范围？

作为基于服务帐户的身份验证的参考，我可以简单地运行：

credentials = service_account.Credentials.from_service_account_file(CREDENTIALS_FILE, scopes=SCOPES)
build('sheets', 'v4', credentials=credentials)

Answer 1

明确使用默认凭据，并在此时设置范围

import google.auth

credentials, project_id = google.auth.default(scopes=....)
build('sheets', 'v4', credentials=credentials)
....

google-auth here的完整文档

无需服务帐户即可对Gsuite API进行身份验证

1 个答案: