Authentication for Google DocAi Api in Apex

Question

We try to integrate the Google Doc Ai https://cloud.google.com/document-ai/docs/drag-and-drop to send pdfs and receive parsed texts. I am struggling with the authentication in Apex for the Api call. I tried this example https://www.salesforceben.com/google-api-and-service-accounts-get-up-and-running-in-30-minutes/ But the bearer I get has no access_token. The flow where I call my Invocable action returns:

"An Apex error occurred: Auth.JWTBearerTokenExchange.JWTBearerTokenExchangeException: No access token in response: {...}".

It contains an id_token, but thats not what I need it seems. I don't know what I have to change. May be the Scope SCOPE = 'https://eu-documentai.googleapis.com/auth'; or audience_claim (AUDIENCE_CLAIM = 'https://www.googleapis.com/oauth2/v4/token') I use are wrong (I don't know where I get the exact information).

Or may be I need a different approach. Does somebody have an advise?

https://salesforce.stackexchange.com/questions/310834/named-credential-with-jwt-token-exchange-for-authorizing-calls-to-google-cloud has the snippet that works. — identigral, Nov 20 '22 at 19:25
...and when you ask questions here, including a Minimal, Reproducible Example would be helpful.. Please take a moment to read How to Ask and take the tour. — identigral, Nov 20 '22 at 19:32

score 0 · Answer 1 · answered Nov 20 '22 at 19:49

0

Problem was the Scope, it was not cleary stated for the DocAi, but it has to be 'https://www.googleapis.com/auth/cloud-platform'

answered Nov 20 '22 at 19:49

N4go

1
2

Authentication for Google DocAi Api in Apex

1 Answers1