HttpError 403请求时无返回”权限不足

Question

从Gmail的电子邮件附件上载到Google Drive：

from __future__ import print_function
import pickle
import os.path
from googleapiclient.discovery import build
from google_auth_oauthlib.flow import InstalledAppFlow
from google.auth.transport.requests import Request

import io
import base64
from googleapiclient.http import MediaIoBaseUpload
from time import sleep


q='has:attachment'
maxResults=int(input("Please specify the number of emails with attachments that you would like to see:"))

#for drive api---------------------------------------------------------------------------------

# If modifying these scopes, delete the file token.pickle.

creds = None
# The file token.pickle stores the user's access and refresh tokens, and is
# created automatically when the authorization flow completes for the first
# time.
if os.path.exists('token_drive.pickle'):
          with open('token_drive.pickle', 'rb') as token_drive:
               creds = pickle.load(token_drive)
# If there are no (valid) credentials available, let the user log in.
if not creds or not creds.valid:
   if creds and creds.expired and creds.refresh_token:
           creds.refresh(Request())
   else:
      flow = InstalledAppFlow.from_client_secrets_file(
     Credentials_drive.json', 'https://www.googleapis.com/auth/drive.metadata.readonly')
      creds1 = flow.run_local_server(port=0)
      # Save the credentials for the next run
      with open('token_drive.pickle', 'wb') as token_drive:
           pickle.dump(creds, token_drive)

   drive_service= build('drive', 'v3', credentials=creds1)


sleep(5)
    

# for gmail api---------------------------------------------------------------------------------   
# If modifying these scopes, delete the file token.pickle.



creds = None
# The file token.pickle stores the user's access and refresh tokens, and is
# created automatically when the authorization flow completes for the first
# time.

if os.path.exists('token.pickle'):
            with open('token.pickle', 'rb') as token:
                 creds = pickle.load(token)
        
# If there are no (valid) credentials available, let the user log in.
if not creds or not creds.valid:
    if creds and creds.expired and creds.refresh_token:
               creds.refresh(Request())
    else:
       flow = InstalledAppFlow.from_client_secrets_file(
      'Credentials.json', 'https://www.googleapis.com/auth/gmail.readonly')
       creds = flow.run_local_server(port=0)
       # Save the credentials for the next run
       with open('token.pickle', 'wb') as token:
             pickle.dump(creds, token)
            
    service = build('gmail', 'v1', credentials=creds)




# Call the Gmail API
results = service.users().labels().list(userId='me').execute()

#Get Messages

results = service.users().messages().list(userId='me',q=q, maxResults=maxResults ,labelIds=['INBOX']).execute()
messages = results.get('messages', [])


def create_folder_in_drive(service,folder_name,parent_folder=[]):
    file_metadata ={
        
        'name':    folder_name,
        'parents': parent_folder,
        'mimeType':'application/vnd.google-apps.folder' 
        
        }      



for  message in messages:
            msg = service.users().messages().get(userId='me',metadataHeaders=['parts'], id=message['id']).execute()
            messageID=msg['threadId']
            messageSubject='(No Subject)({0})'.format(messageID)
            msgdetail=msg.get('payload')
          
            for item in msgdetail['headers']:
                if item['name']=='Subject':
                   if item['value']:
                       messageSubject='{0} ({1})'.format(item['value'],messageID)
                   else:
                       messageSubject='(No Subject)({0})'.format(messageID)
            print("messagesubject:" ,  messageSubject    )
            
            
            #create drive folder
            folder_id=create_folder_in_drive(drive_service,messageSubject)
            
            if 'parts' in msgdetail:
                
                for msgPayload in msgdetail['parts']:
                    mime_type=msgPayload['mimeType'] 
                    file_name=msgPayload['filename']
                    body=msgPayload['body']
                    print(body)
                    if 'attachmentId' in body:
                        attachment_id=body['attachmentId']
                        response=service.users().messages().attachments().get(
                            userId='me',
                            messageId=msg['id'],
                            id=attachment_id
                        ).execute()
                        
                        file_data=base64.urlsafe_b64decode(
                             response.get('data').encode('UTF-8'))
                                            
                        fh=io.BytesIO(file_data)
                        
                        file_metadata= {
                          'name':file_name,
                          'parents':[folder_id]
                            
                        }
                        
                        media_body=MediaIoBaseUpload(fh,mimetype=mime_type,chunksize=1024*1024,resumable=True)
                        
                        file=drive_service.files().create(
                          body=  file_metadata,
                          media_body=media_body,
                          fields='id'
                            
                            ).execute()

朋友们大家好，如果我删除文件目录中的token.pickle和token_drive.pickle文件（这些文件是与google cloud分开创建的）并运行代码：

”ResumableUploadError：

这似乎是Gmail和Drive同时身份验证的问题，因为media\u body和file\u元数据返回一个值，但我无法解决这个问题。

Answer 1

#for gmail and drive api------------------------------------------------------------

# If modifying these scopes, delete the file token.pickle.
SCOPES=['https://www.googleapis.com/auth/gmail.readonly','https://www.googleapis.com/auth/drive','https://www.googleapis.com/auth/drive.file','https://www.googleapis.com/auth/drive.metadata']


creds = None
# The file token.pickle stores the user's access and refresh tokens, and is
# created automatically when the authorization flow completes for the first
# time.

if os.path.exists('token.pickle'):
    with open('token.pickle', 'rb') as token:
         creds = pickle.load(token)

# If there are no (valid) credentials available, let the user log in.
if not creds or not creds.valid:
    if creds and creds.expired and creds.refresh_token:
       creds.refresh(Request())
    else:
       flow = InstalledAppFlow.from_client_secrets_file(
      'Credentials.json', SCOPES)
       creds = flow.run_local_server(port=0)
       # Save the credentials for the next run
       with open('token.pickle', 'wb') as token:
             pickle.dump(creds, token)
    
service = build('gmail', 'v1', credentials=creds)
drive_service = build('drive', 'v3', credentials=creds)
    

Answer 2

我在打电话，盯着你的代码。

您应该能够获得一个范围足以支持Gmail和Drive的令牌，而不是篡改多个令牌。

取消拾取对象也可能会导致某种碰撞。尽管这只适合你，我还是建议你尽量避免酸洗。

这里有一个Google示例，显示了使用Python的Gmail的OAuth流。该示例将|读取令牌作为文件写入磁盘。使用这两个作用域尝试此代码。