Facebook Applications can request details about themselves, which is helpful as we only need to grab the id and secret for an application and can load the rest from Facebook. Is it possible to do the same with googles API acces?
It doesn't seem possible to introspect with the Google API.
Related
I can't figure out what public data means in Google Docs API guides.
Reading the Google Docs API guide authorizing section, we find that for public data the OAuth 2.0 is not necessary, then I tried using patchupdate to update a document which is shared to edit for anyone with the link, and I could not get it to work because the API returns an authentication error.
So the questions are, what is API key for and what does Google mean with public data?
I understand that you refer to the «If the request doesn't require authorization (such as a request for public data), then the application must provide either the API key or an OAuth 2.0 token, or both» part. It says that you should use either an API key or an OAuth 2.0 token (or both), whatever is more convenient for your project. In this guide you can learn more about how to communicate with Google APIs using OAuth 2.0. Meanwhile in this documentation you can see the approach used with API keys. Please don't hesitate to ask me to clarify myself.
I want to fetch my GMB data daily with a cronjob.
The GMB API documentation only explains how to get the Access Token with the standard Oauth setup. It doesn't work for applications like this, without any frontend, because the Consent Screen.
It's possible to skip the Consent Screen using Service Accounts, but not all the Google APIs support this method.
There are a lot of posts talking about the same problem.
Questions:
Do the GMB API supports Oauth via Service Accounts in 2020?
If the answer is yes, is there any official documentation? (I've spend a lot of time on research with no results).
If the answer is not, is it possible to generate Access Token with no expirations? Or a long time duration token at least...
I want to integrate gmail and google calendar in my web application. I can login via google and make api calls to either gmail OR google calendar API, depending on the authorisation that I request from google.
I have not found a way to request authorisation for more than one APIs simultaneously. Is this even possible? Is it possible to receive one access token in order to use it for requests against more than one of Google's APIs?
As far as I know it can be done. If you try testing it in Google Oauth 2.0 Playground and select multiple API scopes.
"scope": "https://www.googleapis.com/auth/calendar https://mail.google.com/ https://www.googleapis.com/auth/drive"
It should look like this:
Hope this helps.
everyone. I'm recently learning OAuth authentication. I'm playing around with google's oauth api. In the tutorial for Google Sign-In for server-side apps, in the third step - Initialize the GoogleAuth object, you need to provide the client id to initialize the GoogleAuth object. I'm just wondering if we need to keep the client id secret because right now anyone can find out what the client id is by looking into the javascript.
You don't need to hide the client ID, provided that you restricted access to specific JavaScript origins and redirect URI's on the server side. See more details on this Quora thread or this IETF thread.
If you own a page that has a circle, and you'd like to add people to that circle programmatically, how would you do so? Would it be something similar to:
curl `ruby file_that_outputs_new_people_to_add.rb` 'https://plus.google.com/{pageid}'
What other attributes would you need to include and where in this process would you add oAuth details?
You can't... yet. From the Google+ API documentation:
Note: The Google+ API currently provides read-only access to public data. All API calls require either an OAuth 2.0 token or an API key.
Read-write access with three-legged OAuth is planned, but until there's a documented API for that functionality, there really is no way to do what you're asking.
They offer it now in Google+ Domains API under Circles and addPeople. https://developers.google.com/+/domains/api/circles/addPeople
I recommend looking at Google's own "Google API Client". They have a method which discovers their own API: API Discovery