问使用Google Compute Engine上的应用程序默认凭据访问Sheets API

EN

ADC (应用程序默认凭据)工作流是否仅支持Google Cloud API(例如，支持Google Cloud Storage API，但不支持Google Sheet API)？

我指的是google.auth's default method -不需要在代码中存储任何私钥是一个很大的胜利，也是有效利用ADC (应用程序默认凭证)设置的主要好处。

如果我将GOOGLE_APPLICATION_CREDENTIALS环境变量设置为私钥文件key.json，则以下代码可以正常工作。这与google.auth包的步骤1中的default方法是内联的：1. If the environment variable GOOGLE_APPLICATION_CREDENTIALS is set to the path of a valid service account JSON private key file, then it is loaded and returned.

import google.auth
from apiclient import discovery

credentials, project_id = google.auth.default(scopes=['https://www.googleapis.com/auth/spreadsheets'])

sheets = discovery.build('sheets', 'v4', credentials=credentials)

SPREADSHEETID = '....'

result = sheets.spreadsheets().values().get(spreadsheetId=SPREADSHEETID, range='Sheet1!A:B').execute()

print result.get('values', [])

现在，看一下该方法的第4步：4. If the application is running in Compute Engine or the App Engine flexible environment then the credentials and project ID are obtained from the Metadata Service.

如果我删除Google Compute实例上的GOOGLE_APPLICATION_CREDENTIALS环境变量，我会得到以下错误：

googleapiclient.errors.HttpError: <HttpError 403 when requesting https://sheets.googleapis.com/v4/spreadsheets/..../values/Sheet1%21A%3AB?alt=json returned "Request had insufficient authentication scopes.">

这与Google云控制台的向导不一致：

​

​

​