Google Service Account Authorization Behavior

  • 1
  • Question
  • Updated 2 years ago
  • Answered
I'm wondering if anyone can help be understand the behavior of using a service account with Rise Vision. We have our service account set up and are using the PHP library. 

I anticipated that it would only authenticate for users on our domain, but it seems like it only authenticates users that are part of our Rise Vision account. Users we try to authenticate on our domain, that are not users on our Rise Vision account, get an 'unauthorized_client' error. All users that are currently on our Rise Vision account (most of them are not part of our domain) receive an access token and I am able to make API calls for that user. 

The weird thing that has happened so far is, if I delete a user from our Rise Vision account they are still authenticated. They aren't allowed to access Rise Vision through the API calls, of course, because they are longer a user. Then I tested adding a new user to our Rise account, and that user receives the 'unauthorized_client' error and does not receive an access token. 

I'm just curious as to what exactly is happening here, what users can be authenticated, and what to expect. Is there anyone who is familiar with this, can explain this to me or point out what I'm missing? 

Thanks! 
Photo of Matilda Lane

Matilda Lane

  • 120 Points 100 badge 2x thumb

Posted 2 years ago

  • 1
Photo of Blake Freeman

Blake Freeman, Official Rep

  • 36,116 Points 20k badge 2x thumb
Hi Matilda,

I'm afraid this is a little out of our normal support wheelhouse. I'm going to speak with a developer about this, and see if I can get a clearer understanding of what you're trying to accomplish, and how to move forward.

Please bear with me, since it's end of day here in CDT, I will likely not have any input until the morning.
Photo of Matilda Lane

Matilda Lane

  • 120 Points 100 badge 2x thumb
We've figured it out this morning. It's users who have logged into our website and agreed to let us use their data, which makes a lot more sense. Just had to talk through it some more and do some tinkering :) Thanks!