如何使用服务号id访问我的帐户电子邮件？

Question

我在谷歌云平台上创建了一个项目，并为我的gmail帐户创建了一个OAuth服务帐户id。使用此服务帐户id，我无法阅读电子邮件，因为它说我无法访问此范围Gmail只读。

我通过谷歌搜索发现，我需要从Gsuite admin获得范围访问权限，但如果提供了访问权限，它表示可以使用该权限检索所有组织用户的电子邮件。这个信息正确吗？如果是的话，有没有其他方法可以访问我账户的电子邮件？

下面是我用来访问电子邮件的c#代码。如果有什么方法可以实现，请告诉我。

 #region saggezza account id read
        ServiceAccountCredential serviceAccountCredential = new ServiceAccountCredential(
          new ServiceAccountCredential.Initializer("[e-mail]")
          {
              User = "[e-mail]",
              Scopes = new[] { GmailService.Scope.GmailReadonly }
          }.FromPrivateKey("-----BEGIN PRIVATE KEY-----xxxxxxxxxxxxxxxxx-----END PRIVATE KEY-----\n"));

        if (serviceAccountCredential != null)
        {
            var service3 = new GmailService(new BaseClientService.Initializer
            {
                HttpClientInitializer = serviceAccountCredential,
                ApplicationName = ApplicationName
            });

            var list = service3.Users.Messages.List("me").Execute();
            var count = "Message Count is: " + list.Messages.Count();                
        }

Answer 1

你需要在谷歌开发者控制台上创建一个服务帐户，启用Gmail api。然后，在gsuite帐户开始工作之前，您需要正确地设置域范围的代理。代理设置

 public static class ServiceAccountExample
    {

        /// <summary>
        /// Authenticating to Google using a Service account
        /// Documentation: https://developers.google.com/accounts/docs/OAuth2#serviceaccount
        /// </summary>
        /// <param name="serviceAccountEmail">From Google Developer console https://console.developers.google.com</param>
        /// <param name="serviceAccountCredentialFilePath">Location of the .p12 or Json Service account key file downloaded from Google Developer console https://console.developers.google.com</param>
        /// <returns>AnalyticsService used to make requests against the Analytics API</returns>
        public static GmailService AuthenticateServiceAccount(string serviceAccountEmail, string serviceAccountCredentialFilePath, string[] scopes, string email)
        {
            try
            {
                if (string.IsNullOrEmpty(serviceAccountCredentialFilePath))
                    throw new Exception("Path to the service account credentials file is required.");
                if (!File.Exists(serviceAccountCredentialFilePath))
                    throw new Exception("The service account credentials file does not exist at: " + serviceAccountCredentialFilePath);
                if (string.IsNullOrEmpty(serviceAccountEmail))
                    throw new Exception("ServiceAccountEmail is required.");                

                // For Json file
                if (Path.GetExtension(serviceAccountCredentialFilePath).ToLower() == ".json")
                {
                    GoogleCredential credential;
                    using (var stream = new FileStream(serviceAccountCredentialFilePath, FileMode.Open, FileAccess.Read))
                    {
                        credential = GoogleCredential.FromStream(stream)
                             .CreateScoped(scopes);
                    }

                    // Create the  Analytics service.
                    return new GmailService(new BaseClientService.Initializer()
                    {
                        HttpClientInitializer = credential,
                        ApplicationName = "Gmail Service account Authentication Sample",
                    });
                }
                else if (Path.GetExtension(serviceAccountCredentialFilePath).ToLower() == ".p12")
                {   // If its a P12 file

                    var certificate = new X509Certificate2(serviceAccountCredentialFilePath, "notasecret", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable);
                    var credential = new ServiceAccountCredential(new ServiceAccountCredential.Initializer(serviceAccountEmail)
                    {
                        user = email,
                        Scopes = scopes
                    }.FromCertificate(certificate));

                    // Create the  Gmail service.
                    return new GmailService(new BaseClientService.Initializer()
                    {
                        HttpClientInitializer = credential,
                        ApplicationName = "Gmail Authentication Sample",
                    });
                }
                else
                {
                    throw new Exception("Unsupported Service accounts credentials.");
                }

            }
            catch (Exception ex)
            {                
                throw new Exception("CreateServiceAccountGmailFailed", ex);
            }
        }
    }
}

service3.Users.Messages.List(email).Execute();  

me将是没有任何电子邮件的服务号。您需要使用一个用户。您需要提供您想访问的电子邮件用户的电子邮件地址。这也必须是gSuite域上的用户。