使用ServiceAccount调用Drive Files.List API无法获取公开共享文件求助

Let's break down the problems in your code and get it working properly:

1. Async Authorization Race Condition #

Your drive.files.list call runs right after initializing the JWT client, before the authorization process finishes. Since jwtClient.authorize() is asynchronous, your list request is probably sending an unauthenticated request, which might silently fail or return empty results.

2. Service Account Drive Scope Limitation #

Service accounts have their own isolated Google Drive storage. Publicly shared files won't show up in the default spaces: 'drive' query unless:

• You explicitly share those files with the service account's email (the client_email from your credentials), OR
• You adjust your API parameters to search across all drives the service account can access (including public/shared files)

3. Missing/Incomplete Fields Parameter #

You commented out the fields parameter, which means the API will return a minimal set of data by default. It's better to explicitly define the fields you need to ensure you get the file details you're expecting.

Fixed Code (Async/Await Version) #

This version fixes the async issue and adds the necessary parameters to access shared/public files:

const { google } = require('googleapis');

async function listDriveFiles() {
  const drive = google.drive('v3');
  const jwtClient = new google.auth.JWT(
    'YOUR_CLIENT_EMAIL',
    null,
    'YOUR_PRIVATE_KEY',
    ['https://www.googleapis.com/auth/drive']
  );

  try {
    // Wait for authorization to complete before making requests
    await jwtClient.authorize();
    console.log("Successfully connected!");

    const resp = await drive.files.list({
      auth: jwtClient,
      // Specify the exact file properties you want to retrieve
      fields: "files(id, name, mimeType, webViewLink)",
      includeRemoved: false,
      // Search across all drives the service account can access
      corpora: 'allDrives',
      includeItemsFromAllDrives: true,
      supportsAllDrives: true,
      // Optional: Uncomment below to filter only publicly accessible files
      // q: "visibility='anyoneWithLink'"
    });

    console.log("Result ========>", resp.data.files);
  } catch (err) {
    console.error("Error:", err);
  }
}

listDriveFiles();

Key Changes Explained: #

• Async/Await: Uses async/await to handle the asynchronous authorization flow, ensuring we only make the list request after successful authentication.
• Corpora Parameters: corpora: 'allDrives' paired with includeItemsFromAllDrives: true tells the API to search all files the service account has access to, not just its own native drive storage.
• Explicit Fields: Defines exactly which file properties to return, avoiding unexpected empty or incomplete results.
• Unified Error Handling: Wrapped everything in a try/catch block to make debugging easier.

Additional Tips: #

• If you still don't see files, double-check that you've shared them with the service account's email (found in your JSON credentials file). Publicly shared files should be accessible with the corpora settings above, but sharing directly with the service account ensures more reliable access.
• Confirm your service account has the correct IAM permissions in the Google Cloud Console (you mentioned granting owner access, which should be sufficient).

内容的提问来源于stack exchange，提问作者Abhi Thakkar