App Engine Workspace Service Account Example

app.yaml

runtime: python310

handlers:
- url: /.*
  script: auto

main.py

from flask import Flask, request
import google.auth
from googleapiclient.discovery import build
from googleapiclient.errors import HttpError

app = Flask(__name__)

@app.route('/')
def root():
    userKey = request.args.get('email')
    if not userKey:
        return 'you need to add an email parameter like ' \
                '<a href="/?email=jdoe@acme.com">' \
                '/?email=jdoe@acme.com</a>'
    scopes = [
            'email',
            'https://www.googleapis.com/auth/admin.directory.user.readonly',
            ]
    creds, _ = google.auth.default(scopes=scopes)
    svc = build('admin', 'directory_v1', credentials=creds)
    try:
        result = svc.users().get(
                    userKey=userKey,
                    fields='name',
                    ).execute()
    except HttpError as e:
        return e.reason
    return f'Hello {result["name"]["givenName"]}'

if __name__ == '__main__':
    app.run(host='127.0.0.1',
            port=8080,
            debug=True)

requirements.txt

Flask==2.1.0
google-auth
google-api-python-client