Wiele uprawnień dostępu Google do aplikacji na komputery stacjonarne

Question

Piszę aplikację komputerową w języku C#, która powinna mieć dostęp do wszystkich użytkowników "konta" Google Apps i pobrać zdarzenia kalendarza dla każdego użytkownika. Dodałem interfejs API Kalendarza i zestaw SDK do mojego "projektu".

Obie metody (poniżej) działają dobrze na własną rękę, ale gdy chcę autoryzować moją aplikację dla obu interfejsów API, otrzymuję następujące błędy uprawnień.

mało uprawnienia [403]

invalid_grant "Opis" token zostały cofnięte.

To sprawiło, że zastanawiałem się, czy można było prosić o wszystkie uprawnienia podczas uruchamiania aplikacji, zamiast autoryzować "funkcje" osobno?

static string[] CalendarScopes = {CalendarService.Scope.CalendarReadonly }; 
    static string[] DirectoryScopes = { DirectoryService.Scope.AdminDirectoryUserReadonly }; 

    private static void GoogleCalendar() 
    { 
     UserCredential credential; 

     using (var stream = new FileStream("client_secret.json", FileMode.Open, FileAccess.Read)) 
     { 
      string credPath = Environment.GetFolderPath(Environment.SpecialFolder.Personal); 
      credPath = Path.Combine(credPath, ".credentials"); 

      credential = GoogleWebAuthorizationBroker.AuthorizeAsync(
       GoogleClientSecrets.Load(stream).Secrets, 
       CalendarScopes, 
       "user", 
       CancellationToken.None, 
       new FileDataStore(credPath, true)).Result; 
     } 

     // Create Google Calendar API service. 
     var service = new CalendarService(new BaseClientService.Initializer() 
     { 
      HttpClientInitializer = credential, 
      ApplicationName = ApplicationName, 
     }); 

     // Define parameters of request. 
     EventsResource.ListRequest request = service.Events.List("primary"); 
     request.TimeMin = DateTime.Now; 
     request.ShowDeleted = false; 
     request.SingleEvents = true; 
     //request.MaxResults = 10; 
     request.OrderBy = EventsResource.ListRequest.OrderByEnum.StartTime; 

     // List events. 
     Events events = request.Execute(); 
     Console.WriteLine("Upcoming events:"); 
     if (events.Items != null && events.Items.Count > 0) 
     { 
      foreach (var eventItem in events.Items) 
      { 
       string when = eventItem.Start.DateTime.ToString(); 
       if (String.IsNullOrEmpty(when)) 
       { 
        when = eventItem.Start.Date; 
       } 
       Console.WriteLine("{0} ({1})", eventItem.Summary, when); 
      } 
     } 
     else 
     { 
      Console.WriteLine("No upcoming events found."); 
     } 
     Console.Read(); 
    } 

    private static void GoogleDirectory() 
    { 
     UserCredential credential; 

     using (var stream = 
      new FileStream("client_secret.json", FileMode.Open, FileAccess.Read)) 
     { 
      string credPath = Environment.GetFolderPath(
       Environment.SpecialFolder.Personal); 
      credPath = Path.Combine(credPath, ".credentials"); 

      credential = GoogleWebAuthorizationBroker.AuthorizeAsync(
       GoogleClientSecrets.Load(stream).Secrets, 
       DirectoryScopes, 
       "user", 
       CancellationToken.None, 
       new FileDataStore(credPath, true)).Result; 
      Console.WriteLine("Credential file saved to: " + credPath); 
     } 

     // Create Directory API service. 
     var service = new DirectoryService(new BaseClientService.Initializer() 
     { 
      HttpClientInitializer = credential, 
      ApplicationName = ApplicationName, 
     }); 

     // Define parameters of request. 
     UsersResource.ListRequest request = service.Users.List(); 
     request.Customer = "my_customer"; 
     request.MaxResults = 10; 
     request.OrderBy = UsersResource.ListRequest.OrderByEnum.Email; 

     // List users. 

     IList<User> users = null; 

     try 
     { 
      users = request.Execute().UsersValue; 
     } 
     catch (Exception ex) 
     { 
      throw; 
     } 


     Console.WriteLine("Users:"); 
     if (users != null && users.Count > 0) 
     { 
      foreach (var userItem in users) 
      { 
       Console.WriteLine("{0} ({1})", userItem.PrimaryEmail, 
        userItem.Name.FullName); 
      } 
     } 
     else 
     { 
      Console.WriteLine("No users found."); 
     } 
     Console.Read(); 
    } 

Answer 1

Eureka! Wyjaśniałem, jak rozwiązać problem, a to było całkiem proste.

Rozwiązaniem było "scalenie" metod. Oznaczało to, że muszę tylko raz sprawdzić referencje, używając tokena dostępu. Dodałem także katalog do tablicy zakresów.

static string[] Scopes = { CalendarService.Scope.CalendarReadonly, DirectoryService.Scope.AdminDirectoryUserReadonly }; 

    private static void GoogleThis() 
    { 
     UserCredential credential; 

     using (var stream = new FileStream("client_secret.json", FileMode.Open, FileAccess.Read)) 
     { 
      string credPath = Environment.GetFolderPath(Environment.SpecialFolder.Personal); 
      credPath = Path.Combine(credPath, ".credentials"); 

      credential = GoogleWebAuthorizationBroker.AuthorizeAsync(
       GoogleClientSecrets.Load(stream).Secrets, 
       Scopes, 
       "user", 
       CancellationToken.None, 
       new FileDataStore(credPath, true)).Result; 
     } 

     // Create Google Calendar API service. 
     var eventService = new CalendarService(new BaseClientService.Initializer() 
     { 
      HttpClientInitializer = credential, 
      ApplicationName = ApplicationName, 
     }); 

     // Define parameters of request. 
     EventsResource.ListRequest eventRequest = eventService.Events.List("primary"); 
     eventRequest.TimeMin = DateTime.Now; 
     eventRequest.ShowDeleted = false; 
     eventRequest.SingleEvents = true; 
     //request.MaxResults = 10; 
     eventRequest.OrderBy = EventsResource.ListRequest.OrderByEnum.StartTime; 

     // List events. 
     Events events = eventRequest.Execute(); 
     Console.WriteLine("Upcoming events:"); 
     if (events.Items != null && events.Items.Count > 0) 
     { 
      foreach (var eventItem in events.Items) 
      { 
       string when = eventItem.Start.DateTime.ToString(); 
       if (String.IsNullOrEmpty(when)) 
       { 
        when = eventItem.Start.Date; 
       } 
       Console.WriteLine("{0} ({1})", eventItem.Summary, when); 
      } 
     } 
     else 
     { 
      Console.WriteLine("No upcoming events found."); 
     } 
     // Create Directory API service. 
     var dirService = new DirectoryService(new BaseClientService.Initializer() 
     { 
      HttpClientInitializer = credential, 
      ApplicationName = ApplicationName, 
     }); 

     // Define parameters of request. 
     UsersResource.ListRequest dirRequest = dirService.Users.List(); 
     dirRequest.Customer = "my_customer"; 
     dirRequest.MaxResults = 10; 
     dirRequest.OrderBy = UsersResource.ListRequest.OrderByEnum.Email; 

     // List users. 
     IList<User> users = null; 
     try 
     { 
      users = dirRequest.Execute().UsersValue; 
      Console.WriteLine("Users:"); 
      if (users != null && users.Count > 0) 
      { 
       foreach (var userItem in users) 
       { 
        Console.WriteLine("{0} ({1})", userItem.PrimaryEmail, 
         userItem.Name.FullName); 
       } 
      } 
      else 
      { 
       Console.WriteLine("No users found."); 
      } 
     } 
     catch (Exception ex) 
     { 
      throw; 
     } 
    }