同时授权 Google Drive 和 Google Sheets API

Question

所以我尝试使用 Google Drive 来获取文件 ID 列表，然后使用这些文件 ID 通过 Google Sheets API 更新电子表格。

我正在努力理解我应该如何在 Node.js 中结合这些身份验证以满足两种身份验证需求。

我的目标是创建一个更新电子表格的 Alexa 应用程序，我目前正在运行并尝试扩展此应用程序：https://github.com/acucciniello/alexa-open-doc

因为它是 Alexa，所以我假设我不能像在本地那样在文件系统上存储任何东西，因此为什么我要尝试使用通过命令行生成的硬编码令牌

这是我结合 Google Drive API + Sheets auth 的尝试：

// authorize.js
var GoogleAuth = require('google-auth-library')

// Purpose: To set the credentials from the client_secret.json and     checks if the token is valid
// param(in): credentials: Authentication information of user from     client_secret.json
// param(in):       token: The access token received from the lambda     request and google
// param(in):    callback: A function that handles the error or returns     the authentication information
module.exports = function authorize (credentials, token, callback) {
  var clientSecret = credentials.web.client_secret
  var clientId = credentials.web.client_id
  var redirectUrl = credentials.web.redirect_uris[0]
  var auth = new GoogleAuth()
  var oauth2Client = new auth.OAuth2(clientId, clientSecret, redirectUrl)
  // Check if we have previously stored a token
  oauth2Client.setCredentials({
    access_token: token,
  })
  oauth2Client.credentials = "MY_COMMAND_LINE_TOKEN";
  if (token === undefined) {
    var undefinedToken = 'Token is undefined, please link the skill'
    return callback(undefinedToken)
  }
  return callback(null, oauth2Client)
}

这是我目前正在使用的 Alexa + Google Drive Auth：

// authorize.js
var GoogleAuth = require('google-auth-library')

// Purpose: To set the credentials from the client_secret.json and checks if the token is valid
// param(in): credentials: Authentication information of user from client_secret.json
// param(in):       token: The access token received from the lambda request and google
// param(in):    callback: A function that handles the error or returns the authentication information
module.exports = function authorize (credentials, token, callback) {
  var clientSecret = credentials.web.client_secret
  var clientId = credentials.web.client_id
  var redirectUrl = credentials.web.redirect_uris[0]
  var auth = new GoogleAuth()
  var oauth2Client = new auth.OAuth2(clientId, clientSecret, redirectUrl)
  // Check if we have previously stored a token
  oauth2Client.setCredentials({
    access_token: token
  })
  if (token === undefined) {
    var undefinedToken = 'Token is undefined, please link the skill'
    return callback(undefinedToken)
  }
  return callback(null, oauth2Client)
}

还有我的 Google 表格身份验证：

var fs = require('fs');
var readline = require('readline');
var google = require('googleapis');
var googleAuth = require('google-auth-library');

// If modifying these scopes, delete your previously saved credentials
// at ~/.credentials/sheets.googleapis.com-nodejs-quickstart.json
var SCOPES = ['https://www.googleapis.com/auth/spreadsheets'];
var TOKEN_DIR = (process.env.HOME || process.env.HOMEPATH ||
    process.env.USERPROFILE) + '/.credentials/';
var TOKEN_PATH = TOKEN_DIR + 'sheets.googleapis.com-nodejs-quickstart.json';

// Load client secrets from a local file.
fs.readFile('client_secret.json', function processClientSecrets(err, content) {
  if (err) {
    console.log('Error loading client secret file: ' + err);
    return;
  }
  // Authorize a client with the loaded credentials, then call the
  // Google Sheets API.
  authorize(JSON.parse(content), listMajors);
});

/**
 * Create an OAuth2 client with the given credentials, and then execute the
 * given callback function.
 *
 * @param {Object} credentials The authorization client credentials.
 * @param {function} callback The callback to call with the authorized client.
 */
function authorize(credentials, callback) {
  var clientSecret = credentials.installed.client_secret;
  var clientId = credentials.installed.client_id;
  var redirectUrl = credentials.installed.redirect_uris[0];
  var auth = new googleAuth();
  var oauth2Client = new auth.OAuth2(clientId, clientSecret, redirectUrl);

  // Check if we have previously stored a token.
  fs.readFile(TOKEN_PATH, function(err, token) {
    if (err) {
      getNewToken(oauth2Client, callback);
    } else {
      oauth2Client.credentials = JSON.parse(token);
      callback(oauth2Client);
    }
  });
}

/**
 * Get and store new token after prompting for user authorization, and then
 * execute the given callback with the authorized OAuth2 client.
 *
 * @param {google.auth.OAuth2} oauth2Client The OAuth2 client to get token for.
 * @param {getEventsCallback} callback The callback to call with the authorized
 *     client.
 */
function getNewToken(oauth2Client, callback) {
  var authUrl = oauth2Client.generateAuthUrl({
    access_type: 'offline',
    scope: SCOPES
  });
  console.log('Authorize this app by visiting this url: ', authUrl);
  var rl = readline.createInterface({
    input: process.stdin,
    output: process.stdout
  });
  rl.question('Enter the code from that page here: ', function(code) {
    rl.close();
    oauth2Client.getToken(code, function(err, token) {
      if (err) {
        console.log('Error while trying to retrieve access token', err);
        return;
      }
      oauth2Client.credentials = token;
      storeToken(token);
      callback(oauth2Client);
    });
  });
}

/**
 * Store token to disk be used in later program executions.
 *
 * @param {Object} token The token to store to disk.
 */
function storeToken(token) {
  try {
    fs.mkdirSync(TOKEN_DIR);
  } catch (err) {
    if (err.code != 'EEXIST') {
      throw err;
    }
  }
  fs.writeFile(TOKEN_PATH, JSON.stringify(token));
  console.log('Token stored to ' + TOKEN_PATH);
}

Answer 1

唯一的区别是范围。您可以在同一次授权调用中使用任何范围数组，包括 Drive 和 Sheets。查看您的 client_secret.json 并在那里调整范围。

Answer 2

给出两个范围，用空格分隔：

var SCOPES = ['https://www.googleapis.com/auth/spreadsheets' https://www.googleapis.com/auth/drive];