我已经编写了一个应用程序，它使用了官方文档中的所有客户端/sdk。
credentials = GoogleCredentials
.get_application_default()
.create_scoped('https://www.googleapis.com/auth/drive')
drive = discovery.build(
'drive',
'v3',
http=self.credentials.authorize(Http())
)
drive.files()
.get(fileId=file_id)
.execute()
它在本地与面板生成的服务帐户完美配合，但当我部署应用程序时，AppEngine灵活环境中的服务帐户会遇到问题。
17:15:04.000 /env/lib/python3.4/site-packages/oauth2client/contrib/gce.py:99: UserWarning: You have requested explicit scopes to be used with a GCE service account.
17:15:04.000 Using this argument will have no effect on the actual scopes for tokens
17:15:04.000 requested. These scopes are set at VM instance creation time and
17:15:04.000 can't be overridden in the request.
17:15:04.000
17:15:04.000 warnings.warn(_SCOPES_WARNING)
17:15:04.000 INFO:googleapiclient.discovery:URL being requested: GET https://www.googleapis.com/discovery/v1/apis/drive/v3/rest
17:15:04.000 INFO:oauth2client.client:Attempting refresh to obtain initial access_token
17:15:04.000 INFO:googleapiclient.discovery:URL being requested: GET https://www.googleapis.com/drive/v3/files/0B0Kn....M1pBNFE?alt=json
17:15:04.000 ERROR:root:Failed to retrieve file 0B0K....M1pBNFE. Is it shared with me? project-id@appspot.gserviceaccount.com
17:15:04.000 Traceback (most recent call last):
17:15:04.000 File "/home/vmagent/app/script.py", line 45, in get
17:15:04.000 .execute()
17:15:04.000 File "/env/lib/python3.4/site-packages/oauth2client/util.py", line 135, in positional_wrapper
17:15:04.000 return wrapped(*args, **kwargs)
17:15:04.000 File "/env/lib/python3.4/site-packages/googleapiclient/http.py", line 760, in execute
17:15:04.000 raise HttpError(resp, content, uri=self.uri)
17:15:04.000 googleapiclient.errors.HttpError: <HttpError 403 when requesting https://www.googleapis.com/drive/v3/files/0B0Kn....M1pBNFE?alt=json returned "Insufficient Permission">
我已经检查了权限，它们都设置好了。问题可能是由于尝试创建作用域凭据时出现的"使用此参数将无效…"消息造成的。
正如您在前面的评论中提到的，这是一个已知的问题。正如araf所描述的@在google.com上，灵活环境中的应用程序引擎实例似乎将托管GCE虚拟机的凭据作为应用程序的默认凭据。
同时，作为一种变通方法，您可以使用手动创建的服务帐户，该帐户导出为存储在应用程序中的JSON密钥，如Using OAuth 2.0 for Server to Server Applications。
对于受此问题影响或解决方法无效的任何人，请发布有关该问题的任何相关信息。