Skip to content

Support service account delegation as an alternative to oauth screen #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
DavyLandman wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Support service account delegation as an alternative to oauth screen #2

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
47 changes: 34 additions & 13 deletions main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -209,6 +209,7 @@ func main() {
user := flag.StringP("user", "u", "me", "Gmail account to backup")
verbose := flag.BoolP("verbose", "v", false, "")
incremental := flag.BoolP("incremental", "i", false, "Stop fetching on first existing mail, won't detect deletes")
useServiceAccount := flag.StringP("service-account", "s", "", "Use a service account with delegation setup instead of OAuth (only usable for google workspace)")

flag.Usage = func() {
fmt.Fprintf(os.Stderr, "Usage of %s: [DESTINATION]\n", os.Args[0])
Expand Down Expand Up @@ -239,27 +240,47 @@ func main() {
log.Fatalf("U: %v", err)
}

credentialsPath := filepath.Join(userConfigDir, "gmbackup", "credentials.json")
b, err := os.ReadFile(credentialsPath)
config := &defaultConfig
if err != nil {
if *verbose {
log.Printf("Unable to read client secret file: %v", err)
log.Println("Using default client credentials")
var client option.ClientOption
if useServiceAccount == nil || *useServiceAccount == "" {

credentialsPath := filepath.Join(userConfigDir, "gmbackup", "credentials.json")
b, err := os.ReadFile(credentialsPath)
config := &defaultConfig
if err != nil {
if *verbose {
log.Printf("Unable to read client secret file: %v", err)
log.Println("Using default client credentials")
}
} else {
config, err = google.ConfigFromJSON(b, gmail.GmailReadonlyScope)
if err != nil {
log.Fatalf("Unable to parse client secret file to config: %v", err)
}
if *verbose {
log.Printf("Using client credentials from: %v", credentialsPath)
}
}

client = option.WithHTTPClient(createClient(config))
} else {
config, err = google.ConfigFromJSON(b, gmail.GmailReadonlyScope)
s, err := os.ReadFile(*useServiceAccount)
if err != nil {
log.Fatalf("Unable to read service account file: %v", err)
}
config, err := google.JWTConfigFromJSON(s, gmail.GmailReadonlyScope)
if err != nil {
log.Fatalf("Unable to parse client secret file to config: %v", err)
log.Fatalf("Unable to parse service account file: %v", err)
}
config.Subject = *user

if *verbose {
log.Printf("Using client credentials from: %v", credentialsPath)
log.Printf("Using service account file: %v", *useServiceAccount)
}
}

client := createClient(config)
client = option.WithTokenSource(config.TokenSource(ctx))
}

svc, err := gmail.NewService(ctx, option.WithHTTPClient(client))
svc, err := gmail.NewService(ctx, client)
if err != nil {
log.Fatalf("Unable to retrieve Gmail client: %v", err)
}
Expand Down