如何在Google Cloud Function中授权访问Directory API

Question

有没有人有如何从Google Cloud Function内部访问Google的Directory API的代码示例？更具体地说，我想利用3LO刷新令牌生成一个被授权访问目录API的访问令牌，可能使用'googleapis'库。

- Michael

Answer 1

由于没有人回应，我深入研究了一些文档，并找到这个页面，其中描述了如何使用从应用程序外部（curl + 浏览器）授予的刷新令牌，并将其插入代码以调用目录API：

const google = require('googleapis');
const admin = google.admin('directory_v1');
const OAuth2 = google.auth.OAuth2;

var oauth2Client = new OAuth2(
    'client_id',
    'client_secret',
    'redirect_url'
);

//Store a refresh token from outside Cloud Functions
oauth2Client.setCredentials({
    refresh_token: 'refresh_token_from_curl'
});

//Make sure the access_token is fresh (they expire every hour-ish)
oauth2Client.refreshAccessToken(function(err,tokens){
});

admin.tokens.list({
    auth: oauth2Client,
    userKey: userEmail
}, function(err,response){
    if (err) {
        console.log('The Directory API returned an error: ' + err);
        return reject(err);
    }
    var tokens = response.items;
    if(tokens == null){
        console.log('No tokens for ' + userEmail);
    }
    else {
        console.log('Tokens:');
        for (var i = 0; i < tokens.length; i++){
            var token = tokens[i];
            console.log('clientId: ' + token.clientId);
            console.log('displayText: ' + token.displayText);
            console.log('anonymous: ' + token.anonymous);
            console.log('nativeApp: ' + token.nativeApp);
            console.log('userKey: ' + token.userKey);
            console.log('scopes: ' + token.scopes);
        }
    }
});

- Michael