@mcpher/gas-fakes 2.3.0 → 2.3.1

package/README.md

@@ -51,6 +51,17 @@ Configuration for your local Node environment is handled via environment variabl
 | `LOG_DESTINATION` | `CONSOLE` | Logging destination: `CONSOLE`, `CLOUD`, `BOTH`, or `NONE`. |
 | `STORE_TYPE` | `FILE` | Internal storage type for properties/cache: `FILE` (local) or `UPSTASH` (Redis). |
 
+### Note on Consumer Accounts and ADC
+
+If you are using a consumer account (gmail.com) or do not have access to Domain-Wide Delegation (DWD), you must use Application Default Credentials (`AUTH_TYPE="adc"`) to authenticate with Google Workspace assets.
+
+**Important Security Note:** Due to recent Workspace security changes, you **must** create and provide a custom OAuth2 client credentials JSON file during initialization (`gas-fakes init`) to avoid `403 Access Blocked` errors when using Workspace scopes (like Gmail or Drive).
+
+- **Guide:** [How to allow access to Workspace scopes with Application Default Credentials](https://ramblings.mcpher.com/how-to-allow-access-to-sensitive-scopes-with-application-default-credentials/)
+- **Link to Create Credentials:** [Google Cloud Console Credentials Page](https://console.cloud.google.com/apis/credentials)
+
+**Security Warning:** Always add your client credentials JSON file to your `.gitignore` to prevent it from being committed to GitHub or other source control.
+
 
 
 ### Cloud Logging Integration

package/package.json

@@ -7,10 +7,10 @@
     "@mcpher/fake-gasenum": "^1.0.6",
     "@mcpher/gas-flex-cache": "^1.1.5",
     "@microsoft/microsoft-graph-client": "^3.0.7",
-    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@modelcontextprotocol/sdk": "^1.28.0",
     "@sindresorhus/is": "^7.2.0",
     "acorn": "^8.16.0",
-    "archiver": "^7.0.1",
+    "archiver": "^4.0.2",
     "commander": "^14.0.3",
     "dotenv": "^17.3.1",
     "fast-xml-parser": "^5.5.9",
@@ -39,7 +39,7 @@
   },
   "name": "@mcpher/gas-fakes",
   "author": "bruce mcpherson",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "license": "MIT",
   "main": "main.js",
   "description": "An implementation of the Google Workspace Apps Script runtime: Run native App Script Code on Node and Cloud Run",

package/src/support/auth.js

@@ -201,8 +201,11 @@ const setAuth = async (scopes = [], mcpLoading = false) => {
       
       id.sourceClient = await id.auth.getClient(sourceScopes.length > 0 ? { scopes: sourceScopes } : {})
 
-      const { tokenInfo: userInfo } = await _getTokenInfo(id.sourceClient);
-      const userEmail = process.env.GOOGLE_WORKSPACE_SUBJECT || userInfo.email
+      let userEmail = process.env.GOOGLE_WORKSPACE_SUBJECT;
+      if (!userEmail) {
+        const { tokenInfo: userInfo } = await _getTokenInfo(id.sourceClient);
+        userEmail = userInfo.email;
+      }
 
       const dwdClient = new OAuth2Client()
       dwdClient._token = null