使用Google.GData.Apps的異常：遠程服務器返回錯誤：（503）服務器不可用

Question

我在我的網站上使用Google Provisioning API。 我想使用AppsService類對用戶進行身份驗證。

AppsService service = new AppsService("domain", "admin username", "admin password");
UserEntry user = service.RetrieveUser("username");

但這會引發異常：執行請求失敗： https : //apps-apis.google.com/a/feeds/pmu.mygbiz.com/user/2.0/username

InnerException是：遠程服務器返回錯誤：（503）服務器不可用。

它在6個月前才開始運作。

Answer 1

自 2012年4月20日起， ClientLogin （登錄名和密碼）已棄用，並於2015年5月26日關閉。此代碼不再起作用，您需要切換為使用Oauth2。

我認為您也需要切換到admin目錄api

PM> Install-Package Google.Apis.Admin.Directory.directory_v1

更新代碼：

我可以給您一些示例代碼，但是我不能100％測試它，我沒有應用程序域。

助手類：

class AuthenticationHelper
    {

        /// <summary>
        /// Authenticate to Google Using Oauth2
        /// Documentation https://developers.google.com/accounts/docs/OAuth2
        /// </summary>
        /// <param name="clientId">From Google Developer console https://console.developers.google.com</param>
        /// <param name="clientSecret">From Google Developer console https://console.developers.google.com</param>
        /// <param name="userName">A string used to identify a user.</param>
        /// <returns></returns>
        public static DirectoryService AuthenticateOauth(string clientId, string clientSecret, string userName)
        {

            // There are a lot of scopes check here: https://developers.google.com/admin-sdk/directory/v1/guides/authorizing
            string[] scopes = new string[] {
                    DirectoryService.Scope.AdminDirectoryGroup  ,  // Manage your Groups
                    DirectoryService.Scope.AdminDirectoryUser   // Manage users 
                    };

            try
            {
                // here is where we Request the user to give us access, or use the Refresh Token that was previously stored in %AppData%
                UserCredential credential = GoogleWebAuthorizationBroker.AuthorizeAsync(new ClientSecrets { ClientId = clientId, ClientSecret = clientSecret }
                                                                    , scopes
                                                                    , userName
                                                                    , CancellationToken.None
                                                                    , new FileDataStore("Daimto.AdminSDK.Auth.Store")).Result;



                DirectoryService service = new DirectoryService(new BaseClientService.Initializer()
                {
                    HttpClientInitializer = credential,
                    ApplicationName = "Directory API Sample",
                });
                return service;
            }
            catch (Exception ex)
            {

                Console.WriteLine(ex.InnerException);
                return null;

            }

        }

        /// <summary>
        /// Authenticating to Google using a Service account
        /// Documentation: https://developers.google.com/accounts/docs/OAuth2#serviceaccount
        /// </summary>
        /// <param name="serviceAccountEmail">From Google Developer console https://console.developers.google.com</param>
        /// <param name="keyFilePath">Location of the Service account key file downloaded from Google Developer console https://console.developers.google.com</param>
        /// <returns></returns>
        public static DirectoryService AuthenticateServiceAccount(string serviceAccountEmail, string keyFilePath)
        {

            // check the file exists
            if (!File.Exists(keyFilePath))
            {
                Console.WriteLine("An Error occurred - Key file does not exist");
                return null;
            }

            // There are a lot of scopes check here: https://developers.google.com/admin-sdk/directory/v1/guides/authorizing
            string[] scopes = new string[] {
                    DirectoryService.Scope.AdminDirectoryGroup  ,  // Manage your Groups
                    DirectoryService.Scope.AdminDirectoryUser   // Manage users 
                    };

            var certificate = new X509Certificate2(keyFilePath, "notasecret", X509KeyStorageFlags.Exportable);
            try
            {
                ServiceAccountCredential credential = new ServiceAccountCredential(
                    new ServiceAccountCredential.Initializer(serviceAccountEmail)
                    {
                        Scopes = scopes
                    }.FromCertificate(certificate));

                // Create the service.
                DirectoryService service = new DirectoryService(new BaseClientService.Initializer()
                {
                    HttpClientInitializer = credential,
                    ApplicationName = "Directory API Sample",
                });
                return service;
            }
            catch (Exception ex)
            {

                Console.WriteLine(ex.InnerException);
                return null;

            }
        }
    }

驗證：

 var service = AuthenticationHelper.AuthenticateOauth("xxxxx-d0vpdthl4ms0soutcrpe036ckqn7rfpn.apps.googleusercontent.com", "NDmluNfTgUk6wgmy7cFo64RV", "userID");

發出請求：

    try
    {
        var userList = service.Users.List();
        userList.MaxResults = 10;
        userList.Execute();
    }
    catch (Exception ex)
    {

        Console.WriteLine(ex.Message);


    }

    Console.ReadLine();

從示例項目Google-Dotnet-Samples / admin目錄中提取的代碼