René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"403 error / Forbidden when accessing https://www.googleapis.com/auth/plus.profiles.read in python","articleBody":"```\nI had a working application that pulled all users from a domain and grab the \nuser picture from Google Plus. After few months it was giving me a \"403 error / \nForbidden when accessing\"\n\nThis is the code\n\nimport httplib2\nimport pprint\n\nfrom apiclient.discovery import build\n\nfrom oauth2client.client import SignedJwtAssertionCredentials\n\nSERVICE_ACCOUNT_EMAIL = 'xxxx@developer.gserviceaccount.com'\nSERVICE_ACCOUNT_PKCS12_FILE_PATH = '/xxxx/privatekey.pem'\nUSER_EMAIL = 'xyz@test.com'\n\nSCOPES = ['https://www.googleapis.com/auth/plus.profiles.read']\n\ndef authenticate():\n    print \"opening the key\"\n    f = open(SERVICE_ACCOUNT_PKCS12_FILE_PATH, 'rb')\n    key = f.read()\n    f.close()\n    print \"closing the key\"\n\n    credentials = SignedJwtAssertionCredentials(SERVICE_ACCOUNT_EMAIL, key, scope=SCOPES, sub=USER_EMAIL)\n    http = httplib2.Http()\n    http = credentials.authorize(http)\n\n    print \"getting the credentials\"\n    return build('plusDomains', 'v1', http=http)\n\nprint \"calling the authentication\"\nservice = authenticate()\n\nprint \"calling people service\"\npeople_service = service.people()\n\nprint \"getting the user profile\"\npeople_document = people_service.get(userId='abc@test.com').execute()\n\nprint 'ID: %s' % people_document.get('id')\nprint 'Display name: %s' % people_document.get('displayName')\nprint 'Image URL: %s' % people_document.get('image').get('url')\nprint 'Profile URL: %s' % people_document.get('url')\n\n\nThis is the output:\ncalling the authentication\nopening the key\nclosing the key\ngetting the credentials\ncalling people service\ngetting the user profile\nTraceback (most recent call last):\n  File \"test.py\", line 39, in \u003cmodule\u003e\n    people_document = people_service.get(userId='abc@test.com').execute()\n  File \"/usr/local/lib/python2.7/dist-packages/oauth2client/util.py\", line 132, in positional_wrapper\n    return wrapped(*args, **kwargs)\n  File \"/usr/local/lib/python2.7/dist-packages/apiclient/http.py\", line 723, in execute\n    raise HttpError(resp, content, uri=self.uri)\napiclient.errors.HttpError: \u003cHttpError 403 when requesting \nhttps://www.googleapis.com/plusDomains/v1/people/abc@test.com?alt=json returned \n\"Forbidden\"\u003e\n\nBy the way this is the scopes I have in the Google's CPANEL\n\nhttps://www.googleapis.com/auth/admin.directory.user.readonly\nhttps://www.googleapis.com/auth/plus.profiles.read\n\n\nHere is the link to the stackoverflow question: \nhttp://stackoverflow.com/questions/25857123/403-error-forbidden-when-accessing-h\nttps-www-googleapis-com-auth-plus-profil\n```\n\nOriginal issue reported on code.google.com by `adinno...@conservation.org` on 23 Sep 2014 at 6:10\n","author":{"url":"https://github.com/GoogleCodeExporter","@type":"Person","name":"GoogleCodeExporter"},"datePublished":"2016-03-28T19:47:35.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/337/google-api-python-client/issues/337"}