Service account

This describes how to get an access token from the Goa library using a service account, as described in Oauth2 for Apps Script in a few lines of code (which you should read first for background).
If you have initialized the credentials as described in Goa Setup, this is good to go. There is no consent dialog required for a service account.
This example does a query using the Google DataStore API and a service account flow.
Page Content hide
1 getting the token
2 consuming the token
3 Using a service account service.
4 Share with your network

getting the token

function dataStoreSA (params) {
       
  // pick up the token refreshing if necessary
  var goa = cGoa.GoaApp.createGoa('DriverDatastore_serviceaccount', PropertiesService.getScriptProperties()).execute(params);
  
  if (!goa.hasToken()) {
    throw 'no token retrieved';
  }
  
  // do a test - passing the token and any parameters that arrived to this function
  Logger.log (testDataStore (goa.getToken(), goa.getParams(params) ));
  
}

 

consuming the token

function testDataStore (accessToken,params) {
 
   var options = {
     method: "POST",
     contentType : "application/json" ,
     muteHttpExceptions : true,
     headers: {
       "authorization": "Bearer " + accessToken,
     },
     payload:JSON.stringify({
       "query": {
        "kinds": [{"name":"polymerdbab"}]
       }
      })
   };
   

  return UrlFetchApp.fetch( 
    "https://www.googleapis.com/datastore/v1beta2/datasets/xliberationdatastore/runQuery", options);

}

 

Using a service account service.

When the service account one off credentials package is created, it uses the data from the JSON file, as in this example.

 cGoa.GoaApp.setPackage (propertyStore , cGoa.GoaApp.createServiceAccount (DriveApp , {

    packageName: 'DriverDatastore_serviceaccount',

    fileId:'0B9xxxxxxx2s',

    scopes : cGoa.GoaApp.scopesGoogleExpand (['datastore','userinfo.email']),

    service:'google_service'

  }));

Notice the use of the service definition ‘google_service’, which looks like this.

 

google_service: {
  authUrl: "https://www.googleapis.com/oauth2/v3/token",
  tokenUrl: "https://www.googleapis.com/oauth2/v3/token",
  defaultDuration: 600,
  accountType: "serviceaccount"
}

For more like this, see OAuth2 for Apps Script in a few lines of code

Why not join our forum, follow the blog or follow me on Twitter to ensure you get updates when they are available.