- Replace JWT service account authentication with OAuth2 refresh token flow
- Service accounts cannot create Google Meet links for personal Gmail accounts
- Update edge function to use OAuth2 token exchange
- Change database column from google_service_account_json to google_oauth_config
- Add helper tool (get-google-refresh-token.html) to generate OAuth credentials
- Update IntegrasiTab UI to show OAuth config instead of service account
- Add SQL migration file for new google_oauth_config column
OAuth2 Config format:
{
"client_id": "...",
"client_secret": "...",
"refresh_token": "..."
}
This approach works with personal @gmail.com accounts without requiring
Google Workspace or Domain-Wide Delegation.
188 lines
6.6 KiB
HTML
188 lines
6.6 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>Get Google OAuth Refresh Token</title>
|
|
<style>
|
|
body {
|
|
font-family: Arial, sans-serif;
|
|
max-width: 800px;
|
|
margin: 50px auto;
|
|
padding: 20px;
|
|
background: #f5f5f5;
|
|
}
|
|
.container {
|
|
background: white;
|
|
padding: 30px;
|
|
border-radius: 8px;
|
|
box-shadow: 0 2px 10px rgba(0,0,0,0.1);
|
|
}
|
|
h1 {
|
|
color: #333;
|
|
border-bottom: 2px solid #4285f4;
|
|
padding-bottom: 10px;
|
|
}
|
|
.step {
|
|
margin: 20px 0;
|
|
padding: 15px;
|
|
background: #f8f9fa;
|
|
border-left: 4px solid #4285f4;
|
|
}
|
|
code {
|
|
background: #f1f1f1;
|
|
padding: 2px 6px;
|
|
border-radius: 3px;
|
|
font-family: 'Courier New', monospace;
|
|
}
|
|
.input-group {
|
|
margin: 15px 0;
|
|
}
|
|
label {
|
|
display: block;
|
|
font-weight: bold;
|
|
margin-bottom: 5px;
|
|
color: #555;
|
|
}
|
|
input {
|
|
width: 100%;
|
|
padding: 10px;
|
|
border: 1px solid #ddd;
|
|
border-radius: 4px;
|
|
box-sizing: border-box;
|
|
}
|
|
button {
|
|
background: #4285f4;
|
|
color: white;
|
|
padding: 12px 24px;
|
|
border: none;
|
|
border-radius: 4px;
|
|
cursor: pointer;
|
|
font-size: 16px;
|
|
margin-top: 10px;
|
|
}
|
|
button:hover {
|
|
background: #3367d6;
|
|
}
|
|
#result {
|
|
margin-top: 20px;
|
|
padding: 15px;
|
|
background: #e8f5e9;
|
|
border: 1px solid #4caf50;
|
|
border-radius: 4px;
|
|
display: none;
|
|
}
|
|
.error {
|
|
background: #ffebee;
|
|
border-color: #f44336;
|
|
}
|
|
textarea {
|
|
width: 100%;
|
|
padding: 10px;
|
|
border: 1px solid #ddd;
|
|
border-radius: 4px;
|
|
font-family: 'Courier New', monospace;
|
|
min-height: 100px;
|
|
box-sizing: border-box;
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="container">
|
|
<h1>🔑 Generate Google OAuth Refresh Token</h1>
|
|
|
|
<div class="step">
|
|
<h3>Step 1: Create Google Cloud Project</h3>
|
|
<ol>
|
|
<li>Go to <a href="https://console.cloud.google.com/" target="_blank">Google Cloud Console</a></li>
|
|
<li>Create a new project or select existing one</li>
|
|
<li>Go to <strong>APIs & Services > Credentials</strong></li>
|
|
<li>Click <strong>+ Create Credentials</strong> → <strong>OAuth client ID</strong></li>
|
|
<li>Application type: <strong>Web application</strong></li>
|
|
<li>Add authorized redirect URI: <code>https://developers.google.com/oauthplayground</code></li>
|
|
<li>Copy the <strong>Client ID</strong> and <strong>Client Secret</strong></li>
|
|
</ol>
|
|
</div>
|
|
|
|
<div class="step">
|
|
<h3>Step 2: Configure OAuth Playground</h3>
|
|
<ol>
|
|
<li>Go to <a href="https://developers.google.com/oauthplayground/" target="_blank">OAuth 2.0 Playground</a></li>
|
|
<li>Click the gear icon (⚙️) in the top right</li>
|
|
<li>Check <strong>Use your own OAuth credentials</strong></li>
|
|
<li>Enter your <strong>Client ID</strong> and <strong>Client Secret</strong> from Step 1</li>
|
|
<li>Click <strong>Close</strong></li>
|
|
</ol>
|
|
</div>
|
|
|
|
<div class="step">
|
|
<h3>Step 3: Get Refresh Token</h3>
|
|
<ol>
|
|
<li>In the left panel, select:
|
|
<ul>
|
|
<li>☑️ Google Calendar API v3</li>
|
|
<li>Click <strong>Authorize APIs</strong></li>
|
|
</ul>
|
|
</li>
|
|
<li>Sign in with your Google account and grant permissions</li>
|
|
<li>Click <strong>Exchange authorization code for tokens</strong></li>
|
|
<li>Copy the <strong>Refresh Token</strong> from the right panel</li>
|
|
</ol>
|
|
</div>
|
|
|
|
<div class="step">
|
|
<h3>Step 4: Generate Configuration</h3>
|
|
<div class="input-group">
|
|
<label for="clientId">Client ID:</label>
|
|
<input type="text" id="clientId" placeholder="Enter your Client ID">
|
|
</div>
|
|
<div class="input-group">
|
|
<label for="clientSecret">Client Secret:</label>
|
|
<input type="text" id="clientSecret" placeholder="Enter your Client Secret">
|
|
</div>
|
|
<div class="input-group">
|
|
<label for="refreshToken">Refresh Token:</label>
|
|
<input type="text" id="refreshToken" placeholder="Enter your Refresh Token">
|
|
</div>
|
|
<button onclick="generateConfig()">Generate Configuration</button>
|
|
</div>
|
|
|
|
<div id="result"></div>
|
|
</div>
|
|
|
|
<script>
|
|
function generateConfig() {
|
|
const clientId = document.getElementById('clientId').value.trim();
|
|
const clientSecret = document.getElementById('clientSecret').value.trim();
|
|
const refreshToken = document.getElementById('refreshToken').value.trim();
|
|
|
|
if (!clientId || !clientSecret || !refreshToken) {
|
|
const resultDiv = document.getElementById('result');
|
|
resultDiv.style.display = 'block';
|
|
resultDiv.className = 'error';
|
|
resultDiv.innerHTML = '<strong>Error:</strong> Please fill in all fields.';
|
|
return;
|
|
}
|
|
|
|
const config = {
|
|
client_id: clientId,
|
|
client_secret: clientSecret,
|
|
refresh_token: refreshToken
|
|
};
|
|
|
|
const configJson = JSON.stringify(config, null, 2);
|
|
|
|
const resultDiv = document.getElementById('result');
|
|
resultDiv.style.display = 'block';
|
|
resultDiv.className = '';
|
|
resultDiv.innerHTML = `
|
|
<h4>✅ Configuration Generated!</h4>
|
|
<p>Copy this JSON and paste it into the <strong>Google OAuth Config</strong> field in your admin panel:</p>
|
|
<textarea readonly onclick="this.select()">${configJson}</textarea>
|
|
<p><strong>Important:</strong> Keep these credentials secure. Never share them publicly!</p>
|
|
`;
|
|
}
|
|
</script>
|
|
</body>
|
|
</html>
|