403- 请求的身份验证范围不足

Question

我想 link 并查看使用 Google Adwords link 编辑的分析帐户。

使用的程序：

正在使用以下 url 验证范围为“分析和 Adwords”的 google 帐户 https://www.googleapis.com/auth/adwords https://www.googleapis.com/auth/analytics
获得身份验证响应后创建 Google 分析服务对象。
Google 广告 link API 抛出错误“Insufficient Premissions”截图附后

脚本：

<?php

//function to authenticate google account and create analytics service object
function googleAuth(){

        if (!empty($code)) {

                        $postFields = 'client_id=' . Configure::read('GOOGLE_OAUTH_CLIENT_ID') . '&client_secret=' . Configure::read('GOOGLE_OAUTH_CLIENT_SECRET') . '&code=' . $code . '&grant_type=authorization_code&redirect_uri=' . Configure::read('GOOGLE_OAUTH_REDIRECT_URI');

                        $ch = curl_init();
                        curl_setopt($ch, CURLOPT_URL, 'https://accounts.google.com/o/oauth2/token');
                        curl_setopt($ch, CURLOPT_POSTFIELDS, $postFields);

                        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
                        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);

                        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

                        $Rec_Data = curl_exec($ch);

                        if (curl_exec($ch) === false) {
                                return $Rec_Data;
                        }

                        $Rec_Data = json_decode($Rec_Data, true);

                        if (isset($Rec_Data['refresh_token'])) {
                                
                                try {

                                        $credentials = array('client_id' => Configure::read('GOOGLE_OAUTH_CLIENT_ID'), 'client_secret' => Configure::read('GOOGLE_OAUTH_CLIENT_SECRET'), 'redirect_uris' => array(Configure::read('GOOGLE_OAUTH_REDIRECT_URI')));

                                        $client = new \Google_Client($credentials);
                                                
                                                $client->addScope(\Google_Service_Analytics::ANALYTICS_READONLY);
                                                $client->setAccessToken($Rec_Data['access_token']);

                                                // Create an authorized analytics service object.
                                                $analytics = new \Google_Service_Analytics($client);

                                        


                                } catch (Exception $e) {
                                        echo 'Caught exception: ', $e->getMessage(), "\n";
                                        die();
                                        
                                }

                        }
                } else {
                        if (!empty($id)) {
                                header("Location:https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=" . Configure::read('GOOGLE_OAUTH_CLIENT_ID') . "&redirect_uri=" . Configure::read('GOOGLE_OAUTH_REDIRECT_URI') . "&access_type=offline&approval_prompt=force&state=" . $id . "&scope=https://www.googleapis.com/auth/adwords https://www.googleapis.com/auth/analytics");
                                exit;
                        }
                }
}

//function to fetch linked account list
function adwordsLinkAnalytics($analyticsAuth) {
                $this->autoRender = false;

        
                try {
                        $adWordsLinks = $analyticsAuth->management_webPropertyAdWordsLinks
                                ->listManagementwebPropertyAdWordsLinks('123456', 'UA-123456-1');

                } catch (apiServiceException $e) {
                        print 'There was an Analytics API service error '
                        . $e->getCode() . ':+' . $e->getMessage();
                        exit;

                } catch (apiException $e) {
                        print 'There was a general API error '
                        . $e->getCode() . ':-' . $e->getMessage();
                        exit;
                }
                pr($adWordsLinks);
                exit;
                
}

所需结果：使用 adwords 帐户 link 的分析帐户列表。

Answer 1

您缺少 Google 分析中管理实体的范围，请查看此 https://developers.google.com/identity/protocols/oauth2/scopes#analytics

请使用“https://www.googleapis.com/auth/analytics.edit”更新您的范围“

我建议的更新：

function googleAuth(){

        if (!empty($code)) {

                --------------
                ---- Your existing script ----
                --------------
        
        } else {
                if (!empty($id)) {
                        header("Location:https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=" . Configure::read('GOOGLE_OAUTH_CLIENT_ID') . "&redirect_uri=" . Configure::read('GOOGLE_OAUTH_REDIRECT_URI') . "&access_type=offline&approval_prompt=force&state=" . $id . "&scope=https://www.googleapis.com/auth/adwords%20https://www.googleapis.com/auth/analytics%20https://www.googleapis.com/auth/analytics.edit");
                        exit;
                }
        }
}

参考Url:https://developers.google.com/identity/protocols/oauth2/scopes#analytics

403- 请求的身份验证范围不足

403- request has insufficient authentication scopes

php

google-authentication

google-analytics-api

google-ads-api