Google Directory API

[JoepdeJong]

• [x] Connect (!) with Directory API to retrieve groups based on member address
• [x] Make an endpoint that returns the groups for a specific user
• [x] Discuss whether we need to retrieve indirect/parent groups
• [ ] Look into service accounts and see how to delegate them to the correct user (GOOGLE_SERVICE_ACCOUNT_DELEGATED_USER)

[JoepdeJong]

@jgadelange @praseodym @julian9499 can you maybe help me out? I've added a get_google_groups function to the Person model which calls the Google API on the fly. But I do not understand how Django returns the models. What I want to achieve is that the groups are returned when I call the API /ldb/api/v3/people/?q=joepj. I think I have to make some changes to the serializer, but I do not understand how that works.

[julian9499]

For indirect groups. Would it be wise to look into an overnight cache that caches the general group tree every x hours? That way we might be able to make it very lightweight yet lighten the load of a lot of subsequent searches. It might even be possible to create a webhook that updates that cache when a group gets deleted or created: https://www.googlecloudcommunity.com/gc/Workspace-Q-A/notification-when-someone-leaves-a-group/m-p/389854