(403)请求的身份验证范围不足 - OAuth 范围为 Google 课堂 API


(403)Request had insufficient authentication scopes - OAuth scopes Google Classroom API

我是新来的,我不是程序员,那么我需要你的帮助。

我正在测试说明 管理教师和学生 在这里找到:https://developers.google.com/classroom/guides/manage-users

我尝试使用身份验证和作用域,就像它们在 PHP 快速入门中所做的那样:https://developers.google.com/classroom/quickstart/php

我成功运行了快速入门.php示例,然后这意味着作曲家已成功安装,但由于身份验证范围不足,我无法运行代码来//在课程中注册学生。

错误信息:

致命错误:未捕获的异常"Google_Service_Exception" 消息"调用开机自检时出错 h_ttps://classroom.googleapis.com/v1/courses/559522327/students?enrollmentCode=2j1l21l: (403) 请求的身份验证范围不足。 C:''ProgramData''ComposerSetup''bin''vendor''google''apiclient''src''Google''Http''REST.php:110 堆栈跟踪:#0 C:''ProgramData''ComposerSetup''bin''vendor''google''apiclient''src''Google''Http''REST.php(62): Google_Http_REST::d ecodeHttpResponse(Object(Google_Http_Request), 对象(Google_Client)) #1 [内部函数]: Google_Http_REST::d oExecute(Object(Google_Client), 对象(Google_Http_Request)) #2 C:''ProgramData''ComposerSetup''bin''vendor''google''apiclient''src''Google''Task''Runner.php(174): call_user_func_array(阵列,阵列)#3 C:''ProgramData''ComposerSetup''bin''vendor''google''apiclient''src''Google''Http''REST.php(46): Google_Task_Runner->run() #4 C:''ProgramData''ComposerSetup''bin''vendor''google''apiclient''src''Google''Client.php(593): Google_Http_REST::execute(Object(Google_Client), 对象(Google_Http_Request)) #5 C:''Pr inC:''ProgramData''ComposerSetup''bin''vendor''google''apiclient''src''Google''Http''REST.php 在 110 行

尝试调整示例代码:

<?php
require __DIR__ . '/vendor/autoload.php';
define('APPLICATION_NAME', 'Classroom API PHP Quickstart');
define('CREDENTIALS_PATH', '~/.credentials/classroom-php-quickstart.json');
define('CLIENT_SECRET_PATH', __DIR__ . '/client_secret.json');
define('SCOPES', implode(' ', array(
  Google_Service_Classroom::CLASSROOM_ROSTERS) 
));
if (php_sapi_name() != 'cli') {
 //  throw new Exception('This application must be run on the command line.');
}
/**
 * Returns an authorized API client.
 * @return Google_Client the authorized client object
 */
function getClient() {
  $client = new Google_Client();
  $client->setApplicationName(APPLICATION_NAME);
  $client->setScopes(SCOPES);
  $client->setAuthConfigFile(CLIENT_SECRET_PATH);
  $client->setAccessType('offline');
  // Load previously authorized credentials from a file.
  $credentialsPath = expandHomeDirectory(CREDENTIALS_PATH);
  if (file_exists($credentialsPath)) {
    $accessToken = file_get_contents($credentialsPath);
  } else {
    // Request authorization from the user.
   $authUrl = $client->createAuthUrl();
    printf("Open the following link in your browser:'n%s'n", $authUrl);
    print 'Enter verification code: ';
    $authCode = trim(fgets(STDIN));
    // Exchange authorization code for an access token.
    $accessToken = $client->authenticate($authCode);
    // Store the credentials to disk.
    if(!file_exists(dirname($credentialsPath))) {
      mkdir(dirname($credentialsPath), 0700, true);
    }
    file_put_contents($credentialsPath, $accessToken);
    printf("Credentials saved to %s'n", $credentialsPath);
  }
  $client->setAccessToken($accessToken);
  // Refresh the token if it's expired.
  if ($client->isAccessTokenExpired()) {
    $client->refreshToken($client->getRefreshToken());
    file_put_contents($credentialsPath, $client->getAccessToken());
  }
  return $client;
}
/**
 * Expands the home directory alias '~' to the full path.
 * @param string $path the path to expand.
 * @return string the expanded path.
 */
function expandHomeDirectory($path) {
  $homeDirectory = getenv('HOME');
  if (empty($homeDirectory)) {
    $homeDirectory = getenv("HOMEDRIVE") . getenv("HOMEPATH");
  }
  return str_replace('~', realpath($homeDirectory), $path);
}
// Get the API client and construct the service object.
$client = getClient();
$service = new Google_Service_Classroom($client);

//Enroll the student in the course given below
$courseId = '559522327';
$enrollmentCode = '2j1l21l';
$student = new Google_Service_Classroom_Student(array(
  'userId' => 'me',
));
$params = array(
  'enrollmentCode' => $enrollmentCode
);
try {
  $student = $service->courses_students->create($courseId, $student, $params);
  printf("User '%s' was enrolled  as a student in the course with ID '%s'.'n",
      $student->profile->name->fullName, $courseId);
} catch (Google_Service_Exception $e) {
  if ($e->getCode() == 409) {
    print "You are already a member of this course.'n";
  } else {
    throw $e;
  }
}
?>

这与作用域和Google_Service_Classroom类有关吗?

如果你能帮助我,我将不胜感激!

问候

根据文档,需要以下范围之一:

  • https://www.googleapis.com/auth/classroom.rosters
  • https://www.googleapis.com/auth/classroom.profile.emails
  • https://www.googleapis.com/auth/classroom.profile.photos

应用程序请求没有身份验证范围。访问数据需要范围。根据要求选择范围。

以下是课堂 API 的 OAuth 2.0 范围信息:https://developers.google.com/classroom/guides/auth?hl=en