4 ms·
No, the easiest way is to use a service account and share the sheet with the service account. No need for user OAuth at all. https://github.com/juampynr/google
by thesandlord 6y ago
No, the easiest way is to use a service account and share the sheet with the service account. No need for user OAuth at all.
https://github.com/juampynr/google-spreadsheet-reader https://github.com/juampynr/google-spreadsheet-reader
- hogFeast 6y agoWould you build a livelihood on that? I have heard of that but it sounds like the kind of loophole that got the industry into a situation where you needed to pay tens of thousands to use an API.
- thesandlord 6y ago> Would you build a livelihood on that? Yes? Google is notorious for deprecating and changing things, so I would have a backup plan but companies like Streak have built large businesses on much more restricted APIs like Gmail. > kind of loophole This is not a loophole, this is 2-legged Oauth. This is much safer than the typical 3-legged Oauth where the user gives blanket permission to read and write from their Google Drive. The user has to explicitly share the sheet with this service account email. Google is trying to protect people from clicking a phishing link and getting all their email and drive content stolen or hijacked. Yes, Google can shut this down tomorrow or demand thousands of dollars to use it. It's a inherent risk building on top of someone's platform, the trade off being you get the scaffolding and user base the platform already has.