OAuth2 consent setup for individual private application - google-cloud-platform

I'm trying to send prediction requests to the google cloud ai platform from an android application. In order to do this I seem to need OAuth2 verification. I do not want to use the 'External' option as it is not an external application and will only be used by yours truly, but I cannot use the 'Internal' application without a G Suite account.

You can use Google Cloud Functions, please take a look at this Blog Post.
Basically you can call Cloud Functions directly and Cloud Functions take care of the authentication to AI Platform.
Also this may help:
https://cloud.google.com/blog/products/ai-machine-learning/how-to-serve-deep-learning-models-using-tensorflow-2-0-with-cloud-functions

Related

Unable to create the first GCP project via API

I'm trying to create a Dialogflow Agent via API, It require a GCP project that also have to be created via API.
Actually both works well when the end user has already been once in the GCP console and accept the new terms and services.
The problem is that I would like to create the agent without the end user to have to perform any action on Google Cloud Platform.
Before it was possible, but it seems Google added a new terms of services for APIs on the GCP console that pop up the first time the user log in.
My question is, do you think there's any possibility to accepte those terms of services via Oauth or any other possibility?
Seems like Dialogflow still does it well.. so it should be possible :p
TY.
As stated by #John Hanley the user must login to accept the TOS so that the user-entity is bound to the Terms. Here you may find all the information regarding Google APIs Terms of Service.

Confusion with Google Cloud Platform and Google Cloud Storage API's

I am new with google cloud platform and trying to get started. I am interested in using Google Cloud storage.
Following this link:
datastore reference I can see available client libraries (c++ is not one of them)
Now there is google api c++ client:
google api c++ client
and it has "Google Cloud Datastore API" as one of the service api's available.
And then there is this link:
https://developers.google.com/api-client-library/cpp/
which just says:
"The Google APIs C++ Client Library is no longer available. Thank you for your interest."
That got me a bit confused. As I would like to use cloud DataStore via native c++ api.
If you're willing to do quite a bit of work you can interact with the REST API directly using whatever technology you like. You'll need to do understand how to generate an OAUTH2 credential and how the OAUTH2 scopes etc. work. You can then create an OAUTH2 cookie for the Authorization header. Once you're on top of the that the Google APIs helps you navigate the APIs and work out the expected requests and responses:
https://cloud.google.com/datastore/docs/reference/data/rest/
The REST guide lets you try out calls yourself too.

Google Compute Engine API Key

I want to access Google Compute Engine Instances, then I active Google Compute Engine API, but how to retrieve an API key, between server key and browser key, which one should I create ?
If you're using OAuth to authenticate, there're different kind of credentials that you can use, such as web server applications, installed apps, client-sid apps, etc. You need to find out which one you need.
In the Developers Console, you can create the credentials that you might need. At the provided links you can find more information.
There are multiple methods when it comes to authenticate your project to Google API's, You will find the details in page [1] below. Logging to a Compute Engine instance using the UI will use the third method 'Service Account Key' where you don't have to put any action as by default it will use your Compute Engine default service account.
[1] https://cloud.google.com/docs/authentication/api-keys#creating_an_api_key

Admin SDK for multiple google apps accounts

My team is trying to develop a product for the google apps marketplace and I am having issues with the workflow in the new ADMIN SDK.
With the now deprecated Provisioning API we simply ask for a username and password from the account we are trying to manage.
With the ADMIN SDK it seems as though they would need to go enable the API, create a key and do a lot of manual work for this to happen. This really is a tough option for us as the technical level of our clients is not likely to be able to make this transition.
Is there something like the work flow for the provisioning API where they can enable management from a third party or a recommended workflow for a developer to build an application that can access any number of google apps accounts?
A use case for this is say I want to develop a different option for a console, I want to build a console web app and simply ask for credentials or easy setup routine and allow our users to manage their google apps account in a different way.
Thanks in advance,
Steve
The Admin SDK Directory and Reports APIs work correctly with 2-legged OAuth 1.0a which is what the Google Apps Marketplace currently supports and automates. You do need to turn the Admin SDK on under "Register for additional APIs" from your Vendor Profile page on the marketplace. Also, the Administrative APIs for the domain must be turned on. You'll get a generic error that the domain cannot use the APIs if it's off in which case you can direct the client to the exact CPanel page where they can turn it on.

Write a Plug-in for Cloud foundry authentication

I need to integrate the Cloudfoundry with third party authentication tool, say, Keystone. I need to write a plug-in where it can be attached / installed to the cloud foundry with out any code changes in Cloudfoundry. If I want to use the authentication from keystone I will install the plug-in for Cloudfoundry. The code changes should only go to the plug-in and not to the Cloudfoundry code.
Please let me know how can I achieve this.
Thanks in advance,
Sateesh B.
The following link https://github.com/cloudfoundry/vcap-java-client is a java client library that does restful calls to vcap (aka cloud foundry). Now in my opinion, if you want to use a custom authentication method (be whatever you choose) in high level terms, you would have to make it into a adapter design pattern.
Once your users pass your authentication, your application can then communicate with Cloud Foundry via rest calls or libraries such as https://github.com/cloudfoundry/vcap-java-client and have their account created or etc. You just have to add that layer of your own authentication which then you can use the data from the authenticated user in creating or fetching cloud foundry info/apps.
This way you haven't touched cloud foundry and you can easily implement more than one way of authentication.