google-oauth

OAuth 2.0 - does the client-secret has to be “secret”?

拜拜、爱过 提交于 2020-05-26 05:13:11
问题 I'm just curious - do I need to keep the client_secret from Google/FaceBook/another OAuth 2.0 providers in a 'secret' place? As far as I can see, there're very little things that could be done with client-secret parameter, as soon as I specify very restrictive callback-urls. So is it safe, for instance, to commit 'secret' keys to github/bitbucket/etc as a public repository for some live web-project? As far as I know, client-secret has nothing in common with the developer account on google

Nuxtjs Google Auth

廉价感情. 提交于 2020-05-16 04:35:09
问题 After calling $auth.loginWith('google'), I am getting http://localhost:3000/ru/user-registration#state=D7xooLsNNxNGfbvcQMU5g&access_token=ya29.a0Ae4lvC2z0XERgeRUipmu7c205WWCCSVgRZ-s_mYWg6ZoMgCGzVZ-U69arfpn-ybm5kthqtvqQrD7lGYmNDqiLtkW1aIecP6Wp-bwINMok3ztNcW5KwmlohLmtnbk4IZVkciKfb8T_JUtf89xpJcjpt2dSx_09FPGSKc&token_type=Bearer&expires_in=3599&scope=email%20profile%20openid%20https://www.googleapis.com/auth/userinfo.email%20https://www.googleapis.com/auth/userinfo.profile&authuser=0&prompt

OAuth consent screen - ability to remove application logo

旧时模样 提交于 2020-05-11 03:47:20
问题 I added an application logo by mistake on the OAuth consent screen (URL: https://console.cloud.google.com/apis/credentials/consent), and now it says my consent screen requires verification by Google. Is there any way to remove the application logo from the consent screen? Edit: I didn't make it clear before but I wanted to remove the logo to get rid of the verification notice. 回答1: In order to delete the logo, follow these steps: Open the OAuth Consent Screen Configuration in Chrome or a

OAuth consent screen - ability to remove application logo

此生再无相见时 提交于 2020-05-11 03:45:52
问题 I added an application logo by mistake on the OAuth consent screen (URL: https://console.cloud.google.com/apis/credentials/consent), and now it says my consent screen requires verification by Google. Is there any way to remove the application logo from the consent screen? Edit: I didn't make it clear before but I wanted to remove the logo to get rid of the verification notice. 回答1: In order to delete the logo, follow these steps: Open the OAuth Consent Screen Configuration in Chrome or a

How to load client credentials from json file for YouTube Analytics api?

£可爱£侵袭症+ 提交于 2020-04-29 10:08:18
问题 I want to retrieve monetization data from a friend's YouTube channel. I've used the python code below to get the authentication credentials from him, which I then saved to a JSON file. In that process, he has to click a link and send me the key. I want to avoid that by saving the credentials data. I think I have done that, but how do I load it now? import json import os import google.oauth2.credentials import google_auth_oauthlib.flow from googleapiclient.discovery import build from

How can a webapp using the Google Drive REST API share files with another user using the same app?

牧云@^-^@ 提交于 2020-04-18 12:37:20
问题 My webapp is a 3D virtual gaming tabletop with no back-end server... instead, it uses Google Drive to store user data and images. I have a specific question, but I'll describe my situation more fully in case there's a solution somewhere above the level of my question. The Use-Case User A, the Game Master (GM), uses the app to upload an image of a map, and some images of some monsters. The app uploads the images to a folder structure it has created in User A's Google Drive, and the app marks

How to upload a file to Google Drive using Python and the Drive API v3

谁说胖子不能爱 提交于 2020-03-25 22:01:08
问题 I have tried uploading file to Google Drive from my local system using a Python script but I keep getting HttpError 403. The script is as follows: from googleapiclient.http import MediaFileUpload from googleapiclient import discovery import httplib2 import auth SCOPES = "https://www.googleapis.com/auth/drive" CLIENT_SECRET_FILE = "client_secret.json" APPLICATION_NAME = "test" authInst = auth.auth(SCOPES, CLIENT_SECRET_FILE, APPLICATION_NAME) credentials = authInst.getCredentials() http =

Accessing an organization-restriced Google Sheet via API

ⅰ亾dé卋堺 提交于 2020-03-23 20:05:08
问题 I am writing a Python 3.7 script that needs to read data from a Google Spreadsheet. The spreadsheet in question belongs to an Organization that my work Google Account is part of: let's just call it "Organization". The spreadsheet permissions are set as "Anyone at Organization with the link can view". This detail has been preventing my application from working. I went to the credentials dashboard at https://console.cloud.google.com/apis/credentials while being authenticated with my account in

Google Authorized redirect URIs

◇◆丶佛笑我妖孽 提交于 2020-03-20 03:08:11
问题 Let's say my app's main domain is at https://www.example.com App is going to have lots of instances, i.e. https://www.example.com/client1 https://www.example.com/client2 https://www.example.com/client3 <..> In order to have OAuth2 authentication against my app, I currently have redirect URIs as such: https://www.example.com/client1/SignInGoogle https://www.example.com/client2/SignInGoogle Is there a way to add one Authorized redirect URI for all of these clients? i.e. https://www.example.com/

Google Authorized redirect URIs

。_饼干妹妹 提交于 2020-03-20 03:07:08
问题 Let's say my app's main domain is at https://www.example.com App is going to have lots of instances, i.e. https://www.example.com/client1 https://www.example.com/client2 https://www.example.com/client3 <..> In order to have OAuth2 authentication against my app, I currently have redirect URIs as such: https://www.example.com/client1/SignInGoogle https://www.example.com/client2/SignInGoogle Is there a way to add one Authorized redirect URI for all of these clients? i.e. https://www.example.com/