GAM-team / got-your-back

Got Your Back (GYB) is a command line tool for backing up your Gmail messages to your computer using Gmail's API over HTTPS.
https://github.com/GAM-team/got-your-back/wiki
Apache License 2.0
2.6k stars 205 forks source link

receiving 404 error when authorizing service accounts #362

Open janiececald opened 2 years ago

janiececald commented 2 years ago

The issue tracker is for reporting product deficiencies. How do I questions should be posted to the discussion forum at https://groups.google.com/group/got-your-back. When in doubt, start at the discussion forum and return here only when instructed to do so.

Please confirm the following:

Full steps to reproduce the issue:

  1. When Checking service account DwD for scopes getting fail
  2. try to launch https://gyb-shortn.jaylee.us/g2yau9
  3. get a 404 error

Expected outcome (what are you trying to do?):

Actual outcome (what errors or bad behavior do you see instead?):

Screen Shot 2022-03-07 at 5 19 16 PM
Porkstone commented 2 years ago

I'm seeing this as well - Installed GYB today so using a very recent version

I was able to work around this by using this article and taking information from the URL for the clientid and scopes

janiececald commented 2 years ago

I figured it out, the beginning of the link should read this "https://admin.google.com/ac/owl/domainwidedelegation?clientScopeToAdd= https://admin.google.com/ac/owl/domainwidedelegation?clientScopeToAdd=

NOT :"https://admin.google.com/yourdomain.com/ManageOauthClients?clientScopeToAdd= https://admin.google.com/b8ta.com/ManageOauthClients?clientScopeToAdd=https://mail.google.com/,https://www.googleapis.com/auth/apps.groups.migration,https://www.googleapis.com/auth/drive.appdata,https://www.googleapis.com/auth/userinfo.email&clientNameToAdd=116276825312893539343"

On Mar 8, 2022, at 6:57 AM, Charlie Barker @.***> wrote:

I'm seeing this as well - Installed GYB today so using a very recent version

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/got-your-back/issues/362#issuecomment-1061866650, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQSC3YWF2RDZOKMR5VBBNELU65TFXANCNFSM5QE6FPWQ. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you authored the thread.

siliconpi commented 1 year ago

So this can only be done by the domain administrator account? I can't get access to this page.

jay0lee commented 1 year ago

Correct, if you are not the admin you cannot use service account authentication. That's by Google design, only admins have ability to authorize the service account and backup/restore mail data of other users.

You should just use the normal authentication as your own user.

Jay

siliconpi commented 1 year ago

I'm just following the instructions in the program. There doesn't appear to be anything I need to change in case I'm a normal user.

On Sun, Nov 27, 2022, 9:13 PM Jay Lee @.***> wrote:

Correct, if you are not the admin you cannot use service account authentication. That's by Google design, only admins have ability to authorize the service account and backup/restore mail data of other users.

You should just use the normal authentication as your own user.

Jay

— Reply to this email directly, view it on GitHub https://github.com/GAM-team/got-your-back/issues/362#issuecomment-1328272978, or unsubscribe https://github.com/notifications/unsubscribe-auth/AKERNSIGBAS4Z2XVQJVP6ELWKN6THANCNFSM5QE6FPWQ . You are receiving this because you commented.Message ID: @.***>

siliconpi commented 1 year ago

Sorry - to be clearer, I'm just an ordinary user (within a Google Workspace domain) trying to export my data out. I don't have any admin privileges. I followed the instructions and got to the screen shown by @janiececald but cannot access that admin page.

I'm not clear on what the "the normal authentication as your own user" is supposed to be.

You mean I should just use Takeout, or something else? I have the Takeout MBOX file. Will GAM be compatible with that?