使用Google Drive v3 API转移所有权时遇不当内容标记错误

问题场景 #

使用服务账号在Google Drive创建文件夹后，尝试将所有权转移至个人邮箱时收到以下错误：

code: 400,
errors: [
{
message: 'Bad Request. User message: "You cannot share this item because it has been flagged as inappropriate."',
domain: 'global',
reason: 'invalidSharingRequest'
}
]

相关代码如下：

const { google} = require('googleapis');
const credentials = require('./key.json')

const scopes = ['https://www.googleapis.com/auth/drive', 'https://www.googleapis.com/auth/drive.file']

const auth = new google.auth.JWT(
    credentials.client_email,
     null,
    credentials.private_key,
     scopes
);
const drive = google.drive({ version: "v3", auth });

const createFold = async (fold) => {
    const fileMetaData = {
        name: fold,
        mimeType: "application/vnd.google-apps.folder",
    };
    const response =await drive.files
        .create({
            fields: "id",
            resource: fileMetaData,
        })
        .catch((err) => console.log(err));

    const foldId = response.data.id;
    const resp = await drive.permissions
        .create({
            resource: {
                type: "user",
                role: "owner",
                emailAddress: "koko$$$$@gmail.com", //example google email
            },
            fileId: foldId,
            fields: "id",
            moveToNewOwnersRoot: true,
            transferOwnership: true,
            
        })
        .catch((err) => console.log(err));
};

createFold('myFiles')

可能的原因与解决步骤 #

1. 内容标记误判 #

Google自动检测系统可能误将服务账号创建的文件夹标记为不当内容：

• 用服务账号邮箱（key.json中client_email字段）登录Google Drive，找到目标文件夹，手动尝试分享给个人邮箱，触发人工审核或解除标记。
• 若手动分享仍报错，通过Google Drive申诉渠道提交误判申诉。

2. 权限配置检查 #

• 确认服务账号未被限制分享操作，当前drive和drive.file权限已满足需求。
• 若个人邮箱与服务账号分属不同Google Workspace组织，需联系管理员开启跨组织所有权转移权限。

3. 代码分步调整 #

先添加编辑权限再转移所有权，避免触发检测机制：

const createFold = async (fold) => {
    const fileMetaData = {
        name: fold,
        mimeType: "application/vnd.google-apps.folder",
    };
    const response = await drive.files
        .create({
            fields: "id",
            resource: fileMetaData,
        })
        .catch((err) => console.log(err));

    if (!response) return;
    const foldId = response.data.id;

    // 先添加编辑权限
    await drive.permissions.create({
        resource: {
            type: "user",
            role: "writer",
            emailAddress: "koko$$$$@gmail.com",
        },
        fileId: foldId,
        fields: "id",
    }).catch((err) => console.log(err));

    // 再转移所有权
    const resp = await drive.permissions
        .create({
            resource: {
                type: "user",
                role: "owner",
                emailAddress: "koko$$$$@gmail.com",
            },
            fileId: foldId,
            fields: "id",
            moveToNewOwnersRoot: true,
            transferOwnership: true,
        })
        .catch((err) => console.log(err));
};

4. 文件夹命名规范 #

避免使用可能触发敏感词检测的名称，确保文件夹命名合规。

内容的提问来源于stack exchange，提问作者gogolah