Reduced OAuth scope to read_write

This commit is contained in:
Konstantin Chukhlomin
2017-08-07 09:17:16 -04:00
committed by bergquist
parent fcdf282090
commit 7e3c9fcc1c
3 changed files with 3 additions and 1 deletions

View File

@@ -683,6 +683,8 @@ basic auth password
Path to JSON key file associated with a Google service account to authenticate and authorize. Path to JSON key file associated with a Google service account to authenticate and authorize.
Service Account keys can be created and downloaded from https://console.developers.google.com/permissions/serviceaccounts. Service Account keys can be created and downloaded from https://console.developers.google.com/permissions/serviceaccounts.
Service Account should have "Storage Object Writer" role.
### bucket name ### bucket name
Bucket Name on Google Cloud Storage. Bucket Name on Google Cloud Storage.

View File

@@ -39,7 +39,7 @@ func (u *GCSUploader) Upload(imageDiskPath string) (string, error) {
log.Debug("Creating JWT conf") log.Debug("Creating JWT conf")
conf, err := google.JWTConfigFromJSON(data, "https://www.googleapis.com/auth/devstorage.full_control") conf, err := google.JWTConfigFromJSON(data, "https://www.googleapis.com/auth/devstorage.read_write")
if err != nil { if err != nil {
return "", err return "", err
} }