{"action":"created","issue":{"url":"https://api.github.com/repos/google/oauth2client/issues/502","repository_url":"https://api.github.com/repos/google/oauth2client","labels_url":"https://api.github.com/repos/google/oauth2client/issues/502/labels{/name}","comments_url":"https://api.github.com/repos/google/oauth2client/issues/502/comments","events_url":"https://api.github.com/repos/google/oauth2client/issues/502/events","html_url":"https://github.com/google/oauth2client/issues/502","id":148762636,"number":502,"title":"403 when using DWD in appengine to use admin sdk","user":{"login":"jessicawisesc","id":18336099,"avatar_url":"https://avatars.githubusercontent.com/u/18336099?v=3","gravatar_id":"","url":"https://api.github.com/users/jessicawisesc","html_url":"https://github.com/jessicawisesc","followers_url":"https://api.github.com/users/jessicawisesc/followers","following_url":"https://api.github.com/users/jessicawisesc/following{/other_user}","gists_url":"https://api.github.com/users/jessicawisesc/gists{/gist_id}","starred_url":"https://api.github.com/users/jessicawisesc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jessicawisesc/subscriptions","organizations_url":"https://api.github.com/users/jessicawisesc/orgs","repos_url":"https://api.github.com/users/jessicawisesc/repos","events_url":"https://api.github.com/users/jessicawisesc/events{/privacy}","received_events_url":"https://api.github.com/users/jessicawisesc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2016-04-15T20:35:11Z","updated_at":"2016-04-15T23:23:39Z","closed_at":null,"body":"Hi guys! Great work, but running into some issues with the new auth flow.\r\n\r\nI am going for unattended access- i.e. generating reports- to the admin SDK. I stepped away from the GAPPS API's for the last year, and came back to quite the change! \r\n\r\nAttended flow is super simple, but unattended seems a lot more complex. I have tried: AppAssertionCredentials, ServiceAccount, and even using the flow covered in the admin sdk python quickstart.\r\n\r\nCan you clue me in? How is unattended API access supposed to function now? When I try- using a DWD account with it's client ID granted scopes in GApps admin settings- I get a 403.\r\n\r\nAppreciate the clarification. Does your team have a slack I can join for this stuff? The documentation is currently nigh useless due to being very  convoluted. "},"comment":{"url":"https://api.github.com/repos/google/oauth2client/issues/comments/210682003","html_url":"https://github.com/google/oauth2client/issues/502#issuecomment-210682003","issue_url":"https://api.github.com/repos/google/oauth2client/issues/502","id":210682003,"user":{"login":"jonparrott","id":250995,"avatar_url":"https://avatars.githubusercontent.com/u/250995?v=3","gravatar_id":"","url":"https://api.github.com/users/jonparrott","html_url":"https://github.com/jonparrott","followers_url":"https://api.github.com/users/jonparrott/followers","following_url":"https://api.github.com/users/jonparrott/following{/other_user}","gists_url":"https://api.github.com/users/jonparrott/gists{/gist_id}","starred_url":"https://api.github.com/users/jonparrott/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jonparrott/subscriptions","organizations_url":"https://api.github.com/users/jonparrott/orgs","repos_url":"https://api.github.com/users/jonparrott/repos","events_url":"https://api.github.com/users/jonparrott/events{/privacy}","received_events_url":"https://api.github.com/users/jonparrott/received_events","type":"User","site_admin":false},"created_at":"2016-04-15T23:23:39Z","updated_at":"2016-04-15T23:23:39Z","body":"For the directory API, as far as I know it needs to be the email of an\nactual admin in the domain. I'm not 100% sure on that. (We maintain the\nclient library, not the APIs themselves)\n\nOn Fri, Apr 15, 2016, 4:06 PM jessicawisesc <notifications@github.com>\nwrote:\n\n> Thanks! Still getting a 403, but that is progress- 'user email' - would\n> that be a actual user, or would it be the service account email?\n>\n> —\n> You are receiving this because you commented.\n>\n>\n> Reply to this email directly or view it on GitHub\n> <https://github.com/google/oauth2client/issues/502#issuecomment-210677789>\n>\n"}}