如何获取 admin.directory.userlist api 的访问令牌？

Question

我创建了一个 gmail 插件。我正在尝试调用 api curl \ 'https://www.googleapis.com/admin/directory/v1/users?key=[YOUR_API_KEY]' \ --header 'Authorization: Bearer [YOUR_ACCESS_TOKEN]' \ --header 'Accept: application/json' \ --compressed

var loggedUser = Session.getActiveUser().getEmail();
var domain = loggedUser.split('@')[1];
do {
    page = AdminDirectory.Users.list({
    domain: domain,
    maxResults: 100,
    pageToken: pageToken,
   });
   var users = page.users;
    if (users) {
       for (var i = 0; i < users.length; i++) {
          var user = users[i];
          emails.push(user.primaryEmail);
       }
     } else {
       Logger.log('No users found.');
    }
    pageToken = page.nextPageToken;
   } while (pageToken);

我已添加所有必需的范围 https://www.googleapis.com/auth/admin.directory.user.readonly https://www.googleapis.com/auth/admin.directory.user 在我的应用程序清单中。如果我尝试直接点击 api，我会得到 401。在给出范围后，如果我必须手动调用这个 api，有人可以帮我如何获取 access_token 和 api_key 来调用 api 吗？

Answer 1

这对我有用：

• 使用ScriptApp.getOAuthToken() 执行 URL 获取请求以进行授权
• 在manifest file 范围内添加“https://www.googleapis.com/auth/script.external_request”和“https://www.googleapis.com/auth/admin.directory.user”
• 在清单文件中将请求的 URL 列入白名单

示例代码：

...
var loggedUser = Session.getActiveUser().getEmail();
var domain = loggedUser.split('@')[1];
  var pageToken;
  var emails=[];
do {
    page = AdminDirectory.Users.list({
    domain: domain,
    maxResults: 100,
  //  pageToken: pageToken,
   });

  var url='https://www.googleapis.com/admin/directory/v1/users?domain='+domain;
      var options = {
    "method": "get",
    "pageToken": pageToken,    
    "muteHttpExceptions": true,
    "headers": {"Authorization": "Bearer " + ScriptApp.getOAuthToken()},
   "contentType": "application/json",       
   }
  var page = JSON.parse(UrlFetchApp.fetch(url,options));  
  Logger.log(page);
   var users = page.users;
    if (users) {
       for (var i = 0; i < users.length; i++) {
          var user = users[i];
          emails.push(user.primaryEmail);
       }
     } else {
       Logger.log('No users found.');
    }
    pageToken = page.nextPageToken;
   } while (pageToken);
...

appsscript.json:

{
  "timeZone": "America/Los_Angeles",
  "dependencies": {
    "enabledAdvancedServices": [{
      "userSymbol": "AdminDirectory",
      "serviceId": "admin",
      "version": "directory_v1"
    }, {
      "userSymbol": "Gmail",
      "serviceId": "gmail",
      "version": "v1"
    }]
  },
  "webapp": {
    "access": "DOMAIN",
    "executeAs": "USER_DEPLOYING"
  },
  "oauthScopes": ["https://www.googleapis.com/auth/gmail.addons.execute", "https://www.googleapis.com/auth/gmail.addons.current.message.metadata", "https://www.googleapis.com/auth/gmail.modify", "https://www.googleapis.com/auth/script.external_request", "https://www.googleapis.com/auth/admin.directory.user" ],
   "urlFetchWhitelist": [
    "https://www.googleapis.com/admin/directory/v1/users?domain="
  ],
  "executionApi": {
    "access": "MYSELF"
  },
  "gmail": {
    "name": "XXX",
    "logoUrl": "https://www.gstatic.com/images/icons/material/system/1x/XXX.png",
    "contextualTriggers": [{
      "unconditional": {
      },
      "onTriggerFunction": "XXX"
    }],
    "primaryColor": "#4285F4",
    "secondaryColor": "#4285F4",
    "openLinkUrlPrefixes": ["https://mail.google.com/"]
  }
}