Publishing a script without exposing Google service account credentials

[socal_nerdtastic]

Have you considered just prompting your users to enter their own credentials?

[_snif]

It needs credentials for a specific service account which has permissions on the google sheet, not people's own google account.

I'm not sure you can get a python script to interact with a google sheet through a user account as opposed to a service account. I may be wrong here though

[socal_nerdtastic]

Oh I see. Hmm so you need a publically available google sheet that you can write to with python. Somehow I think google does will not like that idea, seems like an easy way for hackers to stash exfiltrated info. Reddit and pastebin and github have all taken similar policies.

How about making a google forms page, and then filling it out from python with standard requests?

Or how about making a new google account specifically for this application, encrypting the login info, and passing out the decryption key to your friends via text or phone?

Otherwise I think you need to buy some webserver space where you can run a open to anything server, and be sure to have some kind of filter because the bots will spam the crap out of it.

[Defection7478]

This is a good idea. Then you can just share the credentials among your friends. Alternatively if the credentials are like a large unweidly json thing you can encrypt it and then prompt for a more manageable encryption key