Search code examples
ruby-on-railsrubygoogle-apigoogle-calendar-apigoogle-api-ruby-client

Getting notFound error after domain wide delegation

I am trying to set up domain wide delegation with Google so I can have access to a workspace calendar. I've followed through the documentation and here is what I've got so far:

  • Service account for the app is set up
  • Google Calendar API is enabled for this account
  • Generated and saved JSON key
  • Added app's account Client ID to Security -> API Controls -> Domain-wide Delegation with correct scopes

App's service account:

enter image description here

Workspace:

enter image description here

And here is my simple Ruby code for retrieving a simple calendar event:

google_calendar_service = ::Google::Apis::CalendarV3::CalendarService.new
google_calendar_service.authorization ::Google::Auth::ServiceAccountCredentials.make_creds(json_key_io: File.open(PATH_TO_JSON_FILE), scope: MY_SCOPES)

google_calendars.get_event(owner_email, event_id)

Both owner_email and event_id are correct as I have a working code that uses OAuth2 and it can get the event as expected.

What am I missing?

Solution

  • You need to add the subject that you are going to delegate as. This needs to be the user on your domain which you want the service account to act on behalf of

    Check the authorizer.sub line.

     authorizer = Google::Auth::ServiceAccountCredentials.make_creds(
      json_key_io: StringIO.new(File.read AppConfig[:credentials_file]),
      scope: AppConfig[:cal_scope]).dup
    authorizer.sub = @person
    authorizer.fetch_access_token!