\\
!1. Google Cloud Storage REST API\\
\\
__Cloud Storage JSON REST API__ based integration: [Cloud Storage JSON REST API Link |https://cloud.google.com/storage/docs/json_api]\\
\\
__!!! Proxy Configuration:__ If your server accesses the internet through a proxy, make sure to whitelist the following domains for Google Authentication and Drive access:\\
- __oauth2.googleapis.com__\\
- __storage.googleapis.com__\\ 
\\
Start by navigating to Google APIs & Services: [Google APIs & Services Link|https://console.developers.google.com/projectselector/apis/credentials]\\
__!!!Note:__ Ensure the __Cloud Storage__ is enabled at __Enabled APIs & services__. [Google API Library Link|https://console.cloud.google.com/apis/library]\\
\\
[SMTP Google Mail Integration/g_api_services.png]\\
[attachments|clopud_storage_api_enable.png]\\
\\
!1.1 Configure access through a Web Application OAuth client\\
\\
Go to the __Credentials__ menu, click on __Create Credentials__, and select __OAuth client ID__:\\
[SMTP Google Mail Integration/create_credentials.png]\\
\\
Select the application type: __Web application__. Provide a unique name. Then, configure the __Authorized redirect URI__—this is where Google will redirect you after authorization. The Redirect URL must end with __?command=register_gdrive_api__.\\
\\
{{{

    http://127.0.0.1:9090/?command=register_gdrive_api
}}}\\
or
{{{
    
    https://your.crushftp.domain.com/?command=register_gdrive_api
    
}}}\\
Finally, click the __Create__ button.\\
\\
[SMTP Google Mail Integration/credential_config_gdrive.png]\\
\\
After the credentials are created, copy the __Client ID__ and __Client Secret__.\\
\\
[SMTP Google Mail Integration/client_id_secret.png]\\
\\
__!!! Note:__ You can configure the __OAuth consent screen__ by clicking the link above the __Authorized JavaScript origins__ section:\\
"The domains you enter in the fields below will be automatically added to your __OAuth consent screen__ as __authorized domains__."\\
Click the link to open the __OAuth consent screen__ settings, complete the configuration, and authorize your __CrushFTP domain.__\\
Now that the API is enabled, your credentials are setup, and your redirect domains are configured, you can use the credentials in CrushFTP to get your Google auth token and get access.\\
In the User Manager, add a new remote VFS item type and set the protocol to be "GStorage".\\
Click "Get Refresh Token" to finish the config. Provide the client id and secret.\\
\\
[attachments|oauth_form.png]\\
\\
If your domain is not verified you will get a warning message, click on Advanced and proceed further:\\ 
\\
[attachments|not_verified_domain.png]\\
\\
Click on allow:\\
\\
[attachments|allow_form.png]\\
\\
The refresh token will be saved as password.\\
Provide the bucket and the path.\\
It is done! Test the connection and save it!\\
[attachments|bucket_and_test.png]\\
\\
!1.2. Configure access using a Service Account OAuth client\\
\\
Create Credentials -> Service Account.\\
[attachments|service_account.png]\\
\\
Provide a name and continue.\\
[attachments|service_account_details.png]\\
\\
Configure the service account access.\\
[attachments|storage_account_access.png]\\
\\
Click on the "Done" button.\\
\\
Navigate to the newly created Service Account. Go to the KEYS tab. Click on the "Add KEY" button, and then select "Create new key".\\
[attachments|service_account_new_key.png]\\
\\
Download the JSON file.\\
[attachments|service_account_private_key.png]\\
\\
__VFS configuration:__\\
\\
Username:__google_jwt__\\
Special user name for Service Account Access.\\
Password:__<<the JSON file content>>__\\
It authenticates based on the provided JSON file.\\
Provide the __bucket__ and the path.\\
It is done! Test the connection and save it!\\
[attachments|service_acount_vfs_test.png]\\
\\
!2. Access through S3 REST API\\
\\
Generate __Access key__ and __Secret__. Got to [https://console.cloud.google.com/] In the left sidebar of the dashboard, click Google Cloud Storage and then Settings.\\
[attachments|cloud_storage_sttings.png]\\
Select the Interoperability tab. If you haven't enabled it already, click on __Interoperable Access__. Now you should see an empty list and a __Create New Key__ button. Click the button to create an __Access/Secret key__ pair.\\
\\
__Google Cloud S3 VFS configuration:__\\
__1.__
\\Domain:<<Cloud Storage -> Settings -> INTEROPERABILITY -> Domain of __Storage URI__ default is __storage.googleapis.com__>> \\
Change the S3 default domain (s3.amazonaws.com) to the domain of Google Cloud Storage domain.\\
User name:__<<Access Key>>__\\
Password:__<<Secret>>__\\
Bucket:__<<Google Cloud Storage Bucket Name>>__\\
__SHA256 enabled on signing (Signing Version 4)__:<<Enabled>>\\
__!Warning__ Signing version 4 must be enabled, as Google Cloud Storage does not support older signing versions.\\
\\
[attachments|s3_vfs_settings.png]\\
__2.__
Select __GStorage__ Item type.\\
Enable __S3 API__ flag.\\
\\Domain:<<Cloud Storage -> Settings -> INTEROPERABILITY -> Domain of __Storage URI__ default is __storage.googleapis.com__>> \\
Change the S3 default domain (s3.amazonaws.com) to the domain of Google Cloud Storage domain.\\
User name:__<<Access Key>>__\\
Password:__<<Secret>>__\\
Bucket:__<<Google Cloud Storage Bucket Name>>__\\
__SHA256 enabled on signing (Signing Version 4)__:<<Enabled>>\\
__!Warning__ Signing version 4 must be enabled, as Google Cloud Storage does not support older signing versions.\\
\\
[attachments|gstroage_s3_api_vfs_enabled.png]\\
\\
More info about s3 VFS configuration: [S3 integration]\\
\\