React Native集成@google-cloud/logging遇凭据加载错误求助

在Node.js及Firebase Functions环境中，@google-cloud/logging库可正常运行并上报日志，但在React Native中安装使用时出现凭据加载错误，参考同类问题后仍未解决。

现有代码 #

app.js #

// Imports the Google Cloud client library
const {Logging} = require('@google-cloud/logging');
const projectId = 'vendoradminapp';
const logName = 'my-log';
// Creates a client
const logging = new Logging({projectId});
// Selects the log to write to
const log = logging.log(logName);
// The data to write to the log
const text_entry = log.entry('Google Cloud log Entry.....!!! 2');
const message = {
  errorType: 'INFO',
  errorMessage: 'Your setup is not completed fully 2',
};
// The metadata associated with the entry
const metadata = {
  resource: {type: 'global'},
  severity: 'INFO',
};
const json_entry = log.entry(metadata, message);
async function writeLogs() {
  // Asynchronously write the log entry
  await log.write(text_entry);

  // Or let the logging library dispatch the logs
  log.write(json_entry);
}
writeLogs();

logging-key.json #

{
  "type": "service_account",
  "project_id": "vendoradminapp",
  "private_key_id": "58175#########f00",
  "private_key": "#####-----BEGIN PRIVATE KEY-----########",
  "client_email": "logging-quickstart@vendoradminapp.iam.gserviceaccount.com",
  "client_id": "#########",
  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
  "token_uri": "https://oauth2.googleapis.com/token",
  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/logging-quickstart%40vendoradminapp.iam.gserviceaccount.com"
}

报错信息 #

错误：无法加载默认凭据。请查看相关文档了解更多信息

解决方案 #

1. 手动传入Service Account凭据 #

React Native没有Node.js环境的默认凭据加载机制（比如环境变量、本地密钥文件路径），需在初始化Logging实例时直接传入凭据信息：

修改初始化代码如下：

import { Logging } from '@google-cloud/logging'; // 推荐用ES模块导入，适配React Native
const projectId = 'vendoradminapp';
const logName = 'my-log';

// 直接传入完整的service account凭据
const logging = new Logging({
  projectId,
  credentials: {
    type: 'service_account',
    project_id: 'vendoradminapp',
    private_key_id: '58175#########f00',
    // 注意：private_key需保留完整换行符，JSON中的转义字符要还原
    private_key: '-----BEGIN PRIVATE KEY-----\n你的密钥内容\n-----END PRIVATE KEY-----',
    client_email: 'logging-quickstart@vendoradminapp.iam.gserviceaccount.com',
    client_id: '#########',
    auth_uri: 'https://accounts.google.com/o/oauth2/auth',
    token_uri: 'https://oauth2.googleapis.com/token',
    auth_provider_x509_cert_url: 'https://www.googleapis.com/oauth2/v1/certs',
    client_x509_cert_url: 'https://www.googleapis.com/robot/v1/metadata/x509/logging-quickstart%40vendoradminapp.iam.gserviceaccount.com'
  }
});

// 后续日志写入代码不变
const log = logging.log(logName);
// ... 其余代码省略

2. 处理React Native环境兼容性问题 #

@google-cloud/logging为Node.js设计，依赖Node.js内置模块（如fs、http等），React Native中无这些模块，需添加polyfill：

• 安装react-native-url-polyfill、react-native-fs、stream-browserify等库
• 在metro.config.js中配置模块 fallback：

module.exports = {
  resolver: {
    fallback: {
      "fs": require.resolve("react-native-fs"),
      "http": require.resolve("stream-http"),
      "https": require.resolve("https-browserify"),
      "stream": require.resolve("stream-browserify"),
      "crypto": require.resolve("react-native-crypto")
    }
  }
};

3. 更安全的替代方案（推荐） #

直接在客户端嵌入Service Account密钥存在泄露风险，攻击者可通过泄露的密钥操作你的GCP资源。更安全的做法是：

• 搭建后端接口（如Firebase Functions）
• 客户端将日志数据发送到该后端接口
• 后端使用@google-cloud/logging将日志上报到GCP日志系统

内容的提问来源于stack exchange，提问作者GS James