Google: Generates a CSE token which can be used to create or update CSE files

← Drive files operations · Get started

Operation google.drive_files_generatecsetoken

Provider route: GET /drive/v3/files/generateCseToken. Alter supplies the connection’s credentials and routing.

Call through Alter

Install @alter-ai/sdk @alter-ai/google with npm, or alter-sdk-google with pip. Supply your connected customer’s grant ID and the arguments described below.

import { App } from "@alter-ai/sdk";
import { GoogleIntegration } from "@alter-ai/google";

async function execute(input: Parameters<GoogleIntegration["driveFiles"]["driveFilesGenerateCseToken"]>[0]) {
  const app = new App({ apiKey: process.env.ALTER_API_KEY! });
  try {
    const provider = new GoogleIntegration(app, { grantId: process.env.PROVIDER_GRANT_ID! });
    const call = await provider.driveFiles.driveFilesGenerateCseToken(input);
    const result = await call.wait();
    return result.bodyJson();
  } finally {
    await app.close();
  }
}

import os
from alter_sdk import App
from alter_sdk_google import GoogleIntegration

async def execute(arguments):
    async with App(api_key=os.environ["ALTER_API_KEY"]) as app:
        provider = GoogleIntegration(app, {"grant_id": os.environ["PROVIDER_GRANT_ID"]})
        call = await provider.drive_files.drive_files_generate_cse_token(arguments)
        result = await call.wait()
        return result.body_json()

Input

Field	Type	Presence	Description and constraints
$	object	Root	Additional keys: not allowed
query	object	Optional	Additional keys: not allowed
query.fields	string	Optional	Selector specifying which fields to include in a partial response.
query.prettyPrint	boolean	Optional	Returns response with indentations and line breaks. Default: true
query.quotaUser	string	Optional	Available to use for quota purposes for server-side applications. Can be any arbitrary string assigned to a user, but should not exceed 40 characters.
query.fileId	string	Optional	The ID of the file for which the JWT should be generated. If not provided, an id will be generated.
query.parent	string	Optional	The ID of the expected parent of the file. Used when generating a JWT for a new CSE file. If specified, the parent will be fetched, and if the parent is a shared drive item, the shared drive’s policy will be used to determine the KACLS that should be used. It is invalid to specify both file_id and parent in a single request.

Response

Response media type: application/json. The table describes the pinned successful response. Referenced models link to their complete fields.

Field	Type	Presence	Description and constraints
$	Model	Root	Expand Generates a CSE token which can be used to create or update CSE files — response body

Referenced models: Generates a CSE token which can be used to create or update CSE files — response body

Schemas

Generates a CSE token which can be used to create or update CSE files — response body

Field	Type	Presence	Description and constraints
$	object	Root	JWT and associated metadata used to generate CSE files.
currentKaclsId	string	Optional	The current Key ACL Service (KACLS) ID associated with the JWT. Format: int64
currentKaclsName	string	Optional	Name of the KACLs that the returned KACLs ID points to.
fileId	string	Optional	The fileId for which the JWT was generated.
jwt	string	Optional	The signed JSON Web Token (JWT) for the file.
kind	string	Optional	Output only. Identifies what kind of resource this is. Value: the fixed string `"drive#generateCseTokenResponse"`.

Policy, approvals and errors

SDK function policy ID: google.drive_files_generatecsetoken. Catalog operation: drive.files.generateCseToken. Rules can name either ID; function rules distinguish managed calls and conservatively cover raw calls sharing the route. Existing grant permissions and policy rules apply. wait() returns an immediate result or waits for a required approval; it never approves the request itself. Persist the approval ID to resume after a restart.

Provider errors retain their response; JSON decoding raises ProviderAPIError for provider failures. ManagedOperationError identifies contract/input/retention errors. See error handling and provider-specific behavior. Sensitive input may be refused before approval storage. A decoding error never resubmits a write.

Required provider scopes: ["https://www.googleapis.com/auth/drive"]

Official provider source