Node.js调用Dialogflow detectIntent无响应，权限拒绝问题求助

我尝试在JavaScript中使用@google-cloud/dialogflow模块的.detectIntent方法，已在Dialogflow创建代理并配置Small Talk内容，在Google Cloud Console为同一项目启用Dialogflow API，按照教程配置了JSON格式的服务账号密钥，但调用detectIntent函数时，await sessionClient.detectIntent之后无日志输出，Cloud Console和Dialogflow指标显示100%错误率，已确认是**Permission denied（权限拒绝）**错误。

我的JavaScript代码如下：

const CREDENTIALS = require('./service.js');
const PROJECTID = CREDENTIALS.project_id;
const CONFIGURATION = {
    credentials: {
        private_key: CREDENTIALS.private_key,
        client_email: CREDENTIALS.client_email
    }
};

const sessionClient = new dialogflow.SessionsClient(CONFIGURATION);

async function detectIntent(languageCode = 'en-US', queryText, sessionId) {
    let sessionPath = sessionClient.projectAgentSessionPath(PROJECTID, sessionId);

    let request = {
        session: sessionPath,
        queryInput: {
            text: {
                text: queryText,
                languageCode: languageCode,
            }
        }
    };

    const responses = await sessionClient.detectIntent(request, { maxResults: 1, maxRetries: 3 });
    console.log(responses)
    const result = responses[0].queryResult;
    console.log(result)

    return {
        response: result.fulfillmentText
    };
};

service.js文件内容如下：

module.exports = {
  "type": "service_account",
  "project_id": "autotask-gejf",
  "private_key_id": "XXXX",
  "private_key": "-----BEGIN PRIVATE KEY-----\nXXXXXXX\n-----END PRIVATE KEY-----\n",
  "client_email": "autotask@autotask-gejf.iam.gserviceaccount.com",
  "client_id": "xxxxxxxx",
  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
  "token_uri": "https://oauth2.googleapis.com/token",
  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/autotask%40autotask-gejf.iam.gserviceaccount.com"
}

解决步骤 #

• 给服务账号分配Dialogflow权限

  1. 打开Google Cloud Console，进入对应项目
  2. 搜索并进入「IAM与管理员」→「IAM」页面
  3. 找到service.js中client_email对应的服务账号
  4. 点击账号右侧的编辑图标，添加角色：至少分配Dialogflow API Client角色，也可根据需求选择Dialogflow Agent Editor或Dialogflow Agent Reader
  5. 保存更改，等待1-2分钟让权限生效

• 验证服务账号密钥正确性

  • 确认service.js里的private_key格式完整，-----BEGIN PRIVATE KEY-----和-----END PRIVATE KEY-----无缺失，中间密钥内容无多余换行或错误字符
  • 确认project_id与Dialogflow代理所属项目完全一致

• 代码添加错误捕获（方便排查问题）
  修改detectIntent函数，加入try-catch块直接输出错误详情：

  async function detectIntent(languageCode = 'en-US', queryText, sessionId) {
      try {
          let sessionPath = sessionClient.projectAgentSessionPath(PROJECTID, sessionId);
  
          let request = {
              session: sessionPath,
              queryInput: {
                  text: {
                      text: queryText,
                      languageCode: languageCode,
                  }
              }
          };
  
          const responses = await sessionClient.detectIntent(request, { maxResults: 1, maxRetries: 3 });
          console.log(responses)
          const result = responses[0].queryResult;
          console.log(result)
  
          return {
              response: result.fulfillmentText
          };
      } catch (error) {
          console.error('调用detectIntent出错:', error);
          throw error;
      }
  };
  

内容的提问来源于stack exchange，提问作者Kodeur_Kubik