Last active
November 30, 2022 08:08
Revisions
-
fillup revised this gist
Jan 24, 2018 . 1 changed file with 63 additions and 86 deletions.There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -1,86 +1,63 @@ <?php // Updated 2018-01-24 to work with google/apiclient:^2.0 /* * Easiest to use composer to install google-api-php-client and generate autoloader * If you dont want to use composer you can manually include any needed files */ include_once 'vendor/autoload.php'; /* * Email address for admin user that should be used to perform API actions * Needs to be created via Google Apps Admin interface and be added to an admin role * that has permissions for Admin APIs for Users */ $delegatedAdmin = 'delegated-admin@domain.org'; /* * Some name you want to use for your app to report to Google with calls, I assume * it is used in logging or something */ $appName = 'Example App'; /* * Array of scopes you need for whatever actions you want to perform * See https://developers.google.com/admin-sdk/directory/v1/guides/authorizing */ $scopes = array( 'https://www.googleapis.com/auth/admin.directory.user' ); /* * Provide path to JSON credentials file that was downloaded from Google Developer Console * for Service Account */ $authJson = __DIR__ . '/creds.json'; /* * Create Google_Client for making API calls with */ $googleClient = new \Google_Client(); $googleClient->setApplicationName($appName); $googleClient->setAuthConfig($authJson); $googleClient->setSubject($delegatedAdmin); $googleClient->setScopes($scopes); $googleClient->setAccessType('offline'); /* * Get an instance of the Directory object for making Directory API related calls */ $dir = new \Google_Service_Directory($googleClient); /* * Get specific user example */ //$account = $dir->users->get('example@domain.com'); //print_r($account); /* * Get list of users example * In my testing you must include a domain, even though docs say it is optional * I was getting an error 400 without it */ $list = $dir->users->listUsers(array('domain' => 'domain.org', 'maxResults' => 500)); print_r($list); -
Oct 23, 2014 .There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode charactersOriginal file line number Diff line number Diff line change @@ -0,0 +1,86 @@ <?php /** * Easiest to use composer to install google-api-php-client and generate autoloader * If you dont want to use composer you can manually include any needed files */ include_once 'vendor/autoload.php'; /** * Client ID from https://console.developers.google.com/ * Must be added in Google Apps Admin console under Security -> Advanced -> Manage API client access * Requires scope https://www.googleapis.com/auth/admin.directory.user or * https://www.googleapis.com/auth/admin.directory.user.readonly */ $clientId = 'somelongstring.apps.googleusercontent.com'; /** * Service Account Name or "Email Address" as reported on https://console.developers.google.com/ */ $serviceAccountName = 'somelongstring@developer.gserviceaccount.com'; /** * Email address for admin user that should be used to perform API actions * Needs to be created via Google Apps Admin interface and be added to an admin role * that has permissions for Admin APIs for Users */ $delegatedAdmin = 'delegated-admin@domain.com'; /** * This is the .p12 file the Google Developer Console gave you for your app */ $keyFile = 'file.p12'; /** * Some name you want to use for your app to report to Google with calls, I assume * it is used in logging or something */ $appName = 'Example App'; /** * Array of scopes you need for whatever actions you want to perform * See https://developers.google.com/admin-sdk/directory/v1/guides/authorizing */ $scopes = array( 'https://www.googleapis.com/auth/admin.directory.user' ); /** * Create AssertionCredentails object for use with Google_Client */ $creds = new Google_Auth_AssertionCredentials( $serviceAccountName, $scopes, file_get_contents($keyFile) ); /** * This piece is critical, API requests must be used with sub account identifying the * delegated admin that these requests are to be processed as */ $creds->sub = $delegatedAdmin; /** * Create Google_Client for making API calls with */ $client = new Google_Client(); $client->setApplicationName($appName); $client->setClientId($clientId); $client->setAssertionCredentials($creds); /** * Get an instance of the Directory object for making Directory API related calls */ $dir = new Google_Service_Directory($client); /** * Get specific user example */ //$account = $dir->users->get('example@domain.com'); //print_r($account); /** * Get list of users example * In my testing you must include a domain, even though docs say it is optional * I was getting an error 400 without it */ $list = $dir->users->listUsers(array('domain' => 'domain.com', 'maxResults' => 100)); print_r($list);