如何在Spring Boot 2中调用gmail api。x使用服务帐户？

Question

我有一个GSuite服务帐户，配置为访问公司用户gmail帐户，我在G Suite管理控制台中为其提供了所有权限，包括全域访问权限。我创建了一个服务帐户，现在想使用凭据代表他们发送电子邮件。

以下是我目前的代码：

  public void gmailTest(){
  log.info("Gmail test");

  List<String> SCOPES = new ArrayList<String>(GmailScopes.all());
  // List<String> SCOPES = GmailScopes.all();
  InputStream resourceAsStream = Thread.currentThread().getContextClassLoader().getResourceAsStream("Program Name-12345678.json");

  try {
  if(resourceAsStream != null) {
    NetHttpTransport HTTP_TRANSPORT = GoogleNetHttpTransport.newTrustedTransport();

    log.info("Reading credential file");
    GoogleCredential credential = GoogleCredential.fromStream(resourceAsStream);
    log.info("Creating scopes");
    credential = credential.createScoped(SCOPES);

    log.info("building gmail api service");
    Gmail gmailService = new Gmail.Builder(HTTP_TRANSPORT, JSON_FACTORY, credential).setApplicationName("ept-mailer").build();
    String user = "[e-mail]";

    log.info("calling gmail api");
    ListLabelsResponse listResponse = gmailService.users().labels().list(user).execute();
    log.info("call did not error");
    List<Label> labels = listResponse.getLabels();
    if (labels.isEmpty()) {
      System.out.println("No labels found.");
    } else {
      System.out.println("Labels:");
      for (Label label : labels) {
        System.out.printf("- %s\n", label.getName());
      }
    }
  }
  }
  catch (IOException | GeneralSecurityException ex) {
  log.error(ex.getMessage());
  }

以下是我的特权：

 Email (Manage labels)  https://www.googleapis.com/auth/gmail.labels 
 https://www.googleapis.com/auth/gmail.metadata 
 Email (Read/Write)  https://www.googleapis.com/auth/gmail.modify 

这是我得到的错误：

 400 Bad Request
 {
   "code" : 400,
   "errors" : [ {
     "domain" : "global",
     "message" : "Bad Request",
     "reason" : "failedPrecondition"
   } ],
   "message" : "Bad Request"
 }

Answer 1

我也有同样的问题，最后我解决了。我希望这个解决方案能帮助其他人。

创建服务号并将权限委托给谷歌办公套件。

1. 转到谷歌云控制台转到服务帐户

@Value("${gcp.credentials.file}")
private String CREDENTIALS_FILE_PATH;


private static Credentials getCredentials(String CREDENTIALS_FILE_PATH) throws IOException {
    InputStream in = FileLoaderImpl.getStream(CREDENTIALS_FILE_PATH);
    if (in == null) {
        throw new FileNotFoundException("Resource not found: " + CREDENTIALS_FILE_PATH);
    }
    GoogleCredentials credentials = GoogleCredentials
            .fromStream(in)
            .createDelegated(EMAIL_FROM)
            .createScoped(List.of(GmailScopes.GMAIL_SEND, GmailScopes.GMAIL_LABELS));
    return credentials;
}

private Gmail getGmailService() throws IOException, GeneralSecurityException {
    NetHttpTransport HTTP_TRANSPORT = GoogleNetHttpTransport.newTrustedTransport();
    return new Gmail.Builder(HTTP_TRANSPORT, JSON_FACTORY,
            new HttpCredentialsAdapter(getCredentials(CREDENTIALS_FILE_PATH)))
            .setApplicationName(APPLICATION_NAME)
            .build();
}

@Override
public Message sendMailWithTemplate(StarMail starMail, boolean isHtml) {
    try {
        MimeMessage mimeMessage = EmailUtils.createEmailMessage(starMail, isHtml);
        // MimeMessage mm = EmailUtils.createEmail(toEmail, USER_ID, subject, bodyText);
        Gmail service = getGmailService();
        Message message = EmailUtils.sendMessage(service, USER_ID, mimeMessage);
        LOGGER.info("Message id: {} ", message.getId());
        LOGGER.info(message.toPrettyString());
        return message;
    } catch (IOException | MessagingException | GeneralSecurityException e) {
        LOGGER.error("sending email failed {}", e);
        throw new RuntimeException("sending email failed " + e.getMessage());
    }
}

Answer 2

好的，答案是在创建凭证时必须指定用户。在较新版本的API中，此调用已更改为：。createDelegate（）。只要把你想冒充的用户邮件放在那里就行了。

 GoogleCredential credential = GoogleCredential.fromStream(resourceAsStream).createDelegated("[e-mail]");