Skip to content

Conversation

@Forbrig
Copy link
Contributor

@Forbrig Forbrig commented Jan 8, 2026

Ticket: https://bitovi.atlassian.net/browse/FE-663

This pull request introduces Google Drive service account support, including detailed documentation, a CLI utility script, and new dependencies for Google and AWS SDKs. The main focus is on enabling secure, server-to-server authentication with Google Drive using service account credentials, while emphasizing critical security practices and providing clear setup and usage instructions.

Documentation & Security Guidance:

  • Comprehensive Service Account Guide: Added docs/google-service-account.md with step-by-step instructions, screenshots, security warnings, best practices, troubleshooting, and alternatives for setting up and using Google service accounts securely.
  • REST API Documentation Updates: Updated docs/rest-api.md to reference the new service account guide, provide a quick setup checklist, and document the new /api/drive-about-user endpoint, including usage examples and security considerations. [1] [2]

New Functionality:

  • CLI Script for Service Account Testing: Added scripts/api/drive-about-user.ts, a script to fetch authenticated user info from Google Drive using service account credentials, with options for different credential sources and robust error handling.

Dependency Management:

  • Google & AWS SDKs: Added googleapis and @aws-sdk/client-cloudwatch-logs as dependencies in package.json to support Google Drive API integration and (potentially) logging. [1] [2]

Key changes by theme:

Documentation & Security

  • Added a detailed Google service account setup and security guide, including critical warnings, usage scenarios, and best practices.
  • Updated REST API docs to reference the guide, document the new endpoint, and provide clear security warnings and usage instructions. [1] [2]

Functionality

  • Introduced a CLI utility script to test service account authentication and retrieve user info from Google Drive, supporting multiple credential-loading methods and user-friendly error messages.

Dependencies

  • Added googleapis and AWS CloudWatch Logs SDK to package.json to enable Google Drive API access and enhance logging capabilities. [1] [2]

Copy link
Member

@justinbmeyer justinbmeyer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the inline comments. Docs need to be a bit more concise and some other minor improvements.

@Forbrig Forbrig merged commit 41dee4e into main Jan 14, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants