Send mail via Google Apps Gmail using service account domain wide delegation in nodejs

by

So I was half-step close to the solution, the problem was that while creating const jwtClient = new google.auth.JWT(googleKey.client_email, null, googleKey.private_key, ['https://www.googleapis.com/auth/gmail.send'], null); i did not mention the account to be impersonated.

The correct initialization should be:
const jwtClient = new google.auth.JWT(googleKey.client_email, null, googleKey.private_key, ['https://www.googleapis.com/auth/gmail.send'], '[email protected]');

To summarize, the correct steps are:

  1. Created a project in Google Cloud Platform
  2. Created a service account
  3. Enabled Domain Wide Delegation for the service account
  4. Downloaded the key for the service account in JSON format
  5. API Manager > Credentials i have created OAuth 2.0 Client ID
  6. Enabled Gmail API for the project

In Google Apps Admin console:

  1. In Security > Advanced Settings > Manage API client access i have added the Client ID from step 4 above
  2. I have added all possible scopes for the Client ID

This is the code that sends mails:

const google = require('googleapis');
const googleKey = require('./google-services.json');
const jwtClient = new google.auth.JWT(googleKey.client_email, null, googleKey.private_key, ['https://www.googleapis.com/auth/gmail.send'], '<user to impersonate>');

jwtClient.authorize((err, tokens) => {
  if (err) {
    console.err(err);
    return;
  }
  console.log('Google auth success')
  var gmail = google.gmail({version: 'v1'})
  var raw = <build base64 string according to RFC 2822 specification>

  var sendMessage = gmail.users.messages.send({
    auth: jwtClient,
    userId: '<user to impersonate>',
    resource: {
      raw: raw
    }
  }, (err, res) => {
     if (err) {
       console.error(err);
     } else {
       console.log(res);
     }
 });

Hope that would be helpful for others

More Related Contents:

  1. Why are cookies not sent to the server via getServerSideProps in Next.js?
  2. Authenticating socket io connections using JWT
  3. How to destroy JWT Tokens on logout?
  4. Google OAuth using domain wide delegation and service account
  5. jwt.io says Signature Verified even when key is not provided
  6. Verifying Auth0 JWT throws invalid algorigthm
  7. How to send emails with google using nodemailer after Google disabled less sure app option?
  8. Nodemailer/Gmail – What exactly is a refresh token and how do I get one?
  9. How to get user id using jwt token
  10. Unable to delete data from mongoDB
  11. Local dependency in package.json
  12. How to set environment variables from within package.json?
  13. npm ERR! Error: EPERM: operation not permitted, rename
  14. How to display the lastmessage sent when user is not inside the chat?
  15. Error installing bcrypt with npm
  16. Meteor Subscribe doesn’t update sort order of collection
  17. How to setup an authentication middleware in Express.js
  18. Next.js: document is not defined
  19. How to make the webpack dev server run on port 80 and on 0.0.0.0 to make it publicly accessible?
  20. How can I make Node.js ‘require’ absolute? (instead of relative)
  21. MongoError: connect ECONNREFUSED 127.0.0.1:27017
  22. How to know if user is logged in with passport.js?
  23. Reading all files in a directory, store them in objects, and send the object
  24. nodejs “npm ERR! code SELF_SIGNED_CERT_IN_CHAIN”
  25. Mongodb find created results by date today
  26. How to use socket.io in express routes?
  27. how to create a readable stream from a remote url in nodejs?
  28. Express Router undefined params with router.use when split across files
  29. Connect or Express middleware to modify the response.body [closed]
  30. Using multiple parameters in URL in express

Leave a Comment