{"id":5223,"date":"2021-07-20T06:46:15","date_gmt":"2021-07-20T06:46:15","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=5223"},"modified":"2021-07-20T06:46:15","modified_gmt":"2021-07-20T06:46:15","slug":"how-to-use-a-service-account-to-access-google-drive-api-instead-of","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/how-to-use-a-service-account-to-access-google-drive-api-instead-of","title":{"rendered":"How to use a Service account to access Google Drive API instead of"},"content":{"rendered":"

Per Previous post<\/a>\u00a0 , I had to reserve engineer a method for accessing documents in Google drive via API from WordPress , I put the access to Offline so it wouldn’t need refreshing , however after a week it suddenly stopped working with\u00a0<\/p>

invalid_grant<\/strong><\/p>

I put the API in testing<\/a> mode which means\u00a0<\/p>

Authorizations by a test user will expire seven days from the time of consent. If your OAuth client requests\u00a0an\u00a0offline<\/code>\u00a0access type<\/a>\u00a0and receives a refresh token, that token will also expire.<\/pre>
Changing this to “In production<\/a>” looks like a lot of trouble\u00a0<\/p>
However reading through the guides a Service account would fix this task<\/p>
 <\/p>
Create a service account and create a key for that service account<\/p>
\"\"<\/p>
\"\"<\/p>
JSON key file should look like below<\/p>
{
\"type\": \"service_account\",
\"project_id\": \"xxxxxxxx\",
\"private_key_id\": \"xxxxxxxxx\",
\"private_key\": \"END PRIVATE KEY-----\\n\",
\"client_email\": \"xxxxx@xxxxxxxx.iam.gserviceaccount.com\",
\"client_id\": \"xxxxxxxxxxx\",
\"auth_uri\": \"https:\/\/accounts.google.com\/o\/oauth2\/auth\",
\"token_uri\": \"https:\/\/oauth2.googleapis.com\/token\",
\"auth_provider_x509_cert_url\": \"https:\/\/www.googleapis.com\/oauth2\/v1\/certs\",
\"client_x509_cert_url\": \"https:\/\/www.googleapis.com\/robot\/v1\/metadata\/x509\/xxxxxxxxx.iam.gserviceaccount.com\"
}<\/pre>
Save this json as something like service.json<\/p>
Share the folders in Google Drive with your service account xxxxx@xxxxxxxx.iam.gserviceaccount.com with the right permissions\u00a0<\/strong><\/p>
Remove the need for token.json<\/p>

$client->setAuthConfig(__DIR__.’\/service.json’);<\/p>","protected":false},"excerpt":{"rendered":"
Per Previous post\u00a0 , I had to reserve engineer a method for accessing documents in Google drive via API from WordPress , I put the access to […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1590,3555,1601,3553,3554,3517],"class_list":["post-5223","post","type-post","status-publish","format-standard","hentry","category-research","tag-api","tag-drive","tag-google","tag-invalid_grant","tag-service-account","tag-token-json"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t