Azure功能中的谷歌广告API-如何进行身份验证？

Question

我正在使用C#编写一个Azure函数。NET核心。

我已尝试以此页作为应用程序进行身份验证。

我尝试过使用此页面的服务号进行身份验证。

在这两种情况下，我都会收到一条拒绝访问的错误消息。

我的根本问题是，

我应该从Azure功能中为Google广告API使用哪种身份验证方法？

在我最近一次尝试使用服务帐户时，我有以下代码

GoogleAdsConfig config = new GoogleAdsConfig()
            {
           OAuth2Mode = Google.Ads.GoogleAds.Config.OAuth2Flow.SERVICE_ACCOUNT,
           OAuth2SecretsJsonPath = pathtojsonfile,
           OAuth2PrnEmail = "[e-mail]",
           OAuth2Scope = "https://www.googleapis.com/auth/adwords",
           DeveloperToken = "********"
        };
        
        var responseMessage = "";
        var client = new GoogleAdsClient(config);
        

        // Get the GoogleAdsService.
        GoogleAdsServiceClient googleAdsService = client.GetService(Services.V6.GoogleAdsService);

        // Create the query.
        string query =
            @"SELECT
             campaign.id,
             campaign.name,
             ad_group.id,
             ad_group.name,
             ad_group_criterion.criterion_id,
             ad_group_criterion.keyword.text,
             ad_group_criterion.keyword.match_type,
             metrics.impressions,
             metrics.clicks,
             metrics.cost_micros
         FROM keyword_view
         WHERE segments.date DURING LAST_7_DAYS
             AND campaign.advertising_channel_type = 'SEARCH'
             AND ad_group.status = 'ENABLED'
             AND ad_group_criterion.status IN ('ENABLED','PAUSED')
         ORDER BY metrics.impressions DESC
         LIMIT 50";

        try
        {
            // Issue a search request.
            await googleAdsService.SearchStreamAsync(customerId.ToString(), query,
                delegate (SearchGoogleAdsStreamResponse resp)
                {
                    // Display the results.
                    foreach (GoogleAdsRow criterionRow in resp.Results)
                    {
                        responseMessage +=
                            "Keyword with text " +
                            $"'{criterionRow.AdGroupCriterion.Keyword.Text}', match type " +
                            $"'{criterionRow.AdGroupCriterion.Keyword.MatchType}' and ID " +
                            $"{criterionRow.AdGroupCriterion.CriterionId} in ad group " +
                            $"'{criterionRow.AdGroup.Name}' with ID " +
                            $"{criterionRow.AdGroup.Id} in campaign " +
                            $"'{criterionRow.Campaign.Name}' with ID " +
                            $"{criterionRow.Campaign.Id} had " +
                            $"{criterionRow.Metrics.Impressions.ToString()} impressions, " +
                            $"{criterionRow.Metrics.Clicks} clicks, and " +
                            $"{criterionRow.Metrics.CostMicros} cost (in micros) during the " +
                            "last 7 days.";
                    }
                }
            );
        }
        catch (GoogleAdsException e)
        {
            responseMessage += "Failure:\n";
            responseMessage += $"Message: {e.Message}\n";
            responseMessage += $"Failure: {e.Failure}\n";
            responseMessage += $"Request ID: {e.RequestId}\n";
            throw;
        }

        return responseMessage;

当我调用此时，我得到以下错误：

{  
  "StatusCode": 16,  
  "Details": "Request is missing required authentication credential. Expected OAuth 2 access token, login cookie or other valid authentication credential. See https://developers.google.com/identity/sign-in/web/devconsole-project.",  
  "RequestId": "0Yk2OYrUATjwftZ5I0qi2g",  
  "Failure": {  
    "errors": [  
      {  
        "errorCode": {  
          "authenticationError": "NOT_ADS_USER"  
        },  
        "message": "User in the cookie is not a valid Ads user."  
      }  
    ]  
  }  
}  

我已经在启用谷歌广告API的情况下设置了服务帐户。为什么它认为我“不是广告用户”？？？

Answer 1

首先，我们需要理解，函数不应该被用来执行与UI相关的操作。在任何应用服务中，登录的弹出窗口（允许提供凭据）都不受支持。

例如：为了避免这种情况，在AD auth的情况下，我们可以使用服务原则，提供所需的凭证以获取令牌。因此，如果我们想使用google auth SDK，我们需要连接到相关团队（google团队），以了解这是否可行。

为此，您可以检查服务器到服务器服务帐户身份验证，如下所示：

https://cloud.google.com/docs/authentication/production

如果您在这方面需要任何帮助，我们建议您联系相关的支持团队。