Hướng dẫn fix lỗi Access Denied khi kết nối googlesheet

{
  "web": {
    "client_id": "your-client-id.apps.googleusercontent.com",
    "client_secret": "your-client-secret",
    "redirect_uris": [
      "http://localhost:3000/auth/callback",
      "https://yourdomain.com/auth/callback",
      "https://yourdomain.com/oauth2callback"
    ],
    "javascript_origins": [
      "http://localhost:3000",
      "https://yourdomain.com"
    ]
  }
}

# Kiểm tra quota hiện tại
gcloud services list --enabled --filter="name:drive.googleapis.com"
gcloud services list --enabled --filter="name:sheets.googleapis.com"

const SCOPES = [
  'https://www.googleapis.com/auth/drive',
  'https://www.googleapis.com/auth/drive.file',
  'https://www.googleapis.com/auth/spreadsheets',
  'https://www.googleapis.com/auth/spreadsheets.readonly'
];

App name: Your App Name
User support email: [email protected]
App logo: Upload your logo (optional)
App domain: yourdomain.com
Developer contact: [email protected]

Scopes:
  - https://www.googleapis.com/auth/drive
  - https://www.googleapis.com/auth/drive.file
  - https://www.googleapis.com/auth/spreadsheets
  - https://www.googleapis.com/auth/spreadsheets.readonly

Status: Testing
  - App is in testing mode
  - Only test users can access
  - Up to 100 test users allowed
 
Status: In production
  - App is live and available to all users
  - Requires verification for sensitive scopes

const { google } = require('googleapis');
const fs = require('fs');
 
// Cấu hình OAuth2
const oauth2Client = new google.auth.OAuth2(
  'your-client-id',
  'your-client-secret',
  'http://localhost:3000/auth/callback'
);
 
// Thiết lập credentials
oauth2Client.setCredentials({
  access_token: 'your-access-token',
  refresh_token: 'your-refresh-token'
});
 
// Sử dụng Google Drive API
const drive = google.drive({ version: 'v3', auth: oauth2Client });
 
// Sử dụng Google Sheets API
const sheets = google.sheets({ version: 'v4', auth: oauth2Client });

from google.oauth2.credentials import Credentials
from google_auth_oauthlib.flow import InstalledAppFlow
from googleapiclient.discovery import build
 
# Cấu hình scopes
SCOPES = [
    'https://www.googleapis.com/auth/drive',
    'https://www.googleapis.com/auth/spreadsheets'
]
 
# OAuth flow
flow = InstalledAppFlow.from_client_secrets_file(
    'credentials.json', SCOPES)
creds = flow.run_local_server(port=0)
 
# Sử dụng APIs
drive_service = build('drive', 'v3', credentials=creds)
sheets_service = build('sheets', 'v4', credentials=creds)

// Kiểm tra redirect URI trong code
const redirectUri = 'http://localhost:3000/auth/callback';
 
// Đảm bảo URI khớp với Google Console
const authUrl = oauth2Client.generateAuthUrl({
  access_type: 'offline',
  scope: SCOPES,
  redirect_uri: redirectUri
});

// Kiểm tra scopes
const SCOPES = [
  'https://www.googleapis.com/auth/drive',
  'https://www.googleapis.com/auth/spreadsheets'
];
 
// Đảm bảo scopes được cấp quyền trong OAuth consent screen
const authUrl = oauth2Client.generateAuthUrl({
  access_type: 'offline',
  scope: SCOPES,
  prompt: 'consent' // Force consent screen
});

// Kiểm tra quyền cần thiết
const requiredScopes = [
  'https://www.googleapis.com/auth/drive.file',
  'https://www.googleapis.com/auth/spreadsheets'
];
 
// Verify scopes trong token
const tokenInfo = await oauth2Client.getTokenInfo(accessToken);
console.log('Granted scopes:', tokenInfo.scopes);

// Sử dụng environment variables
const config = {
  clientId: process.env.GOOGLE_CLIENT_ID,
  clientSecret: process.env.GOOGLE_CLIENT_SECRET,
  redirectUri: process.env.GOOGLE_REDIRECT_URI
};
 
// Secure token storage
const secureStorage = {
  accessToken: encrypt(accessToken),
  refreshToken: encrypt(refreshToken)
};

try {
  const response = await drive.files.list({
    pageSize: 10,
    fields: 'nextPageToken, files(id, name)'
  });
} catch (error) {
  if (error.code === 403) {
    console.log('Access denied - check OAuth consent screen');
  } else if (error.code === 401) {
    console.log('Unauthorized - refresh token');
  }
}

// Auto refresh token
oauth2Client.on('tokens', (tokens) => {
  if (tokens.refresh_token) {
    // Store refresh token
    storeRefreshToken(tokens.refresh_token);
  }
  // Store access token
  storeAccessToken(tokens.access_token);
});

// Enable detailed logging
const { google } = require('googleapis');
google.options({ auth: oauth2Client });
 
// Log API calls
const drive = google.drive({ version: 'v3', auth: oauth2Client });
drive.files.list({}, (err, res) => {
  if (err) {
    console.error('API Error:', err);
  } else {
    console.log('Success:', res.data);
  }
});

// Check quota usage
const quotaResponse = await drive.about.get({
  fields: 'user,storageQuota'
});
console.log('Quota info:', quotaResponse.data);