客户端未经授权使用此方法检索访问令牌

Question

我在 Ruby on Rails 项目中有一个自定义仪表板，其中包含从 Google Analytics 收集的数据。我使用 Google Analytics Reporting V4 API 和服务帐户进行身份验证。

如果我不冒充用户authorization.sub = 'xxx@mail.com'，我的代码运行良好，如果我这样做，我会收到unauthorized_client 错误，但并非总是如此。有时有效，有时无效。

这是我的代码：

scope = [Google::Apis::AnalyticsreportingV4::AUTH_ANALYTICS_READONLY]

view_id = 'xxxxxx'

ENV['GOOGLE_APPLICATION_CREDENTIALS'] = "#{Rails.root}/private/google_analytics_key.json"
authorization = Google::Auth::get_application_default(scope)
authorization.sub = 'xxx@mail.com'

analytics = Google::Apis::AnalyticsreportingV4::AnalyticsReportingService.new
analytics.authorization = authorization

...

request = Google::Apis::AnalyticsreportingV4::GetReportsRequest.new(report_requests: report_requests)

@result = analytics.batch_get_reports(request)

Rails 服务器日志输出：

Sending HTTP post https://analyticsreporting.googleapis.com/v4/reports:batchGet?
Caught error Authorization failed.  Server message:
{
 "error": "unauthorized_client",
 "error_description": "Client is unauthorized to retrieve access tokens using this method."
}
Error - #<Signet::AuthorizationError: Authorization failed.  Server message:
{
 "error": "unauthorized_client",
 "error_description": "Client is unauthorized to retrieve access tokens using this method."
}>

Completed 500 Internal Server Error in 149ms (ActiveRecord: 0.4ms)



Signet::AuthorizationError (Authorization failed.  Server message:
{
 "error": "unauthorized_client",
 "error_description": "Client is unauthorized to retrieve access tokens using this method."
}):

Answer 1

请记住，服务帐户是虚拟用户。要使服务帐户能够访问您的谷歌分析帐户，它需要预先授权。您像授权任何其他用户一样授权服务帐户。您需要通过 Google Analytics 网站将服务帐户添加为用户，您需要在 ACCOUNT 级别执行此操作，它必须是 ACCOUNT 级别。

我不确定我是否理解你在做什么，就冒充而言。我不是 ruby​​ 开发人员，但您的代码看起来不像我找到的示例 here。