使用服务帐户时，我应该始终使用 serviceAccountCredentials.createDelegated() 吗？

问题描述

有一个具有域范围委托的服务帐户，我需要通过 Admin SDK / Directory Api 从 Workspace 获取用户列表。 我应该总是打电话 serviceAccountCredentials.createDelegated( delegatedUserEmail ) 或类似的吗？这意味着在获取用户列表（电子邮件）之前，我必须至少知道一封用户电子邮件。是否有指定此电子邮件的解决方法？

        final ServiceAccountCredentials serviceAccountCredentials = ServiceAccountCredentials
                .fromPkcs8(
                        clientId,clientEmail,serviceAccountPkcs8Key,serviceAccountPkcs8Id,Arrays.asList(DirectoryScopes.ADMIN_DIRECTORY_USER_READONLY));

        final GoogleCredentials delegatedCredentials = serviceAccountCredentials.createDelegated(delegatedUserEmail);

        HttpRequestinitializer requestinitializer = new HttpCredentialsAdapter(delegatedCredentials);

        Directory directory = new Directory.Builder(
                httpTransport,JSON_FACTORY,requestinitializer)
                .setApplicationName(applicationName)
                .build();

如果我更换

final GoogleCredentials delegatedCredentials = serviceAccountCredentials.createDelegated(delegatedUserEmail);
HttpRequestinitializer requestinitializer = new HttpCredentialsAdapter(delegatedCredentials);

与

HttpRequestinitializer requestinitializer = new HttpCredentialsAdapter(
serviceAccountCredentials.createScoped(DirectoryScopes.ADMIN_DIRECTORY_USER_READONLY));

api 响应错误：

com.google.api.client.googleapis.json.GoogleJsonResponseException: 400 Bad Request
GET https://www.googleapis.com/admin/directory/v1/users?customer=my_customer&maxResults=500
{
  "code" : 400,"errors" : [ {
    "domain" : "global","message" : "Invalid Input","reason" : "invalid"
  } ],"message" : "Invalid Input"
}

解决方法

暂无找到可以解决该程序问题的有效方法，小编努力寻找整理中！

如果你已经找到好的解决方法，欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@）