AppsScriptPulse

A new approach for limiting access to a part of a Google Apps Script Web App

I’ve noticed that several Google Apps Script users are looking for a secure way to restrict access to their Web App. In my case I am looking for a way to let everyone have access to some functions of the web app, while a control panel must be reserved for the administrator (me).

I wanted to share my approach that makes use of the novelty introduced in GAS on March 15, 2021.

Interesting thread in the Google Apps Script Google Group community discussing approaches to creating Web Apps with admin interfaces. Follow the source link for more information and the full discussion.

Source: A new approach for limiting access to a part of a Google Apps Script Web App – Google Groups

Totally Unscripted: Hello Alternate Runtimes – How to build Google Workspace Add-ons without using Apps Script – Thur 22 April at at 1200 PDT / 1500 EDT / 2000 GMT+1

Last month Google announced the general availability of alternate runtimes for Google Workspace Add-ons. With alternative runtimes, developers can write Add-ons in any language and on any infrastructure, and then publish them to the Google Workspace Marketplace. In this episode we are joined by Riël Notermans, owner of Zzapps (and Google Developer Expert) and Steven Bazyl (Developer Relations, Google Cloud). Riël, whose teams have been developing on Google Workspace for over a decade, will share his team’s key takeaways on Alternate Runtimes and Steven will provide additional tips on getting started including the GWAO Card Builder.

Tune in live to ask questions via the YouTube chat https://youtu.be/zDZqENU4B6s

For previous episodes, information and resources visit https://tu.appsscript.info/

Totally Unscripted: Google Apps Script – Discover, Learn and Share Thur 15 April at at 1200 PDT / 1500 EDT / 2000 GMT+1

In this episode we are going to delve into the topic of how you discover, learn and can share Google Apps Script projects, tips and tricks. We hope we can give you some useful advice if you, friends and colleagues are just starting out coding with Apps Script, or tips if you have been coding for a while and want to improve your Apps Script knowledge. For this episode we’ve got two great guest Chanel Greco – saperis (Founder & CEO) and regular Apps Script contributor Bruce Mcpherson, who’s recent work on the visual Google Apps Script explorer tool, scrviz, is providing developers with new ways to explore and replicate existing Apps Script projects.

Tune in live to contribute to the YouTube live chat (recording immediately available). – https://youtu.be/pvwwr2dLkdA

For previous episodes, information and resources visit https://tu.appsscript.info/

Totally Unscripted: Chatting with the community – Google Chat tips from GDEs Laura Taylor and Denis Valášek – Thur 08 April at at 1200 PDT / 1500 EDT / 2000 GMT+1

In this episode of Totally Unscripted we are joined by Google Developers Experts Laura Taylor and Denis Valášek to talk about Google Chat and opportunities to develop Google Chat bots and conversational interfaces with Google Dialogflow. We’ll cover everything that you need to know to get started, opportunities and pitfalls.

Tune in live to contribute to the YouTube live chat (recording immediately available). – https://youtu.be/mtDsScbfRIU

For previous episodes, information and resources visit https://tu.appsscript.info/

🎂 Happy anniversary Google add-ons! 🎂 Long live MERGO the new mail merge add-on from @romain_vialard

Ain’t no party like a mail merge party and Romain Vialard knows how to celebrate!

Find and clone Apps Script projects from GitHub directly into the IDE with scrviz – Desktop Liberation

I thought it might be useful if you are learning Apps Script to be able to pull in examples to play around with. This latest release adds the ability to configure and clone projects from github directly into the Apps Script IDE.

We’ve previously highlighted Bruce Mcpherson’s visual Google Apps Script explorer tool, ‘scrviz’. If you are not familiar with this it is Bruce has figured a way to search and identify Google Apps Script projects publicly shared on GitHub. In this latest update to the tool you can now clone public Google Apps Script projects from scrviz straight into the Apps Script IDE.

The source link explains more about how you can do this:

Source: Find and clone Apps Script projects from github directly into the IDE with scrviz – Desktop Liberation

Modern Angular in Google Workspace Editor Add-ons

I intend this post for established Add-on developers who want to use Angular in Google Workspace editor Add-ons and Google Apps Script webapps. This does not attempt to show how to create Add-ons or Angular apps, but the tooling and build process to use Angular apps in Add-ons. I am also assuming familiarity with installing and using CLI tools in your development workflow.

We recently had the author of this post, Spencer Easton, on an episode of Totally Unscripted to talk about this topic. This companion post provides an overview of using Angular for Add-on development. There is a cost associated with this solution has separate hosting is required for the Webpacks, but as covered by Spencer the cost is low (for a 100K+ users add-on the cost is $8/month).

Source: Modern Angular in Google Workspace Editor Add-ons

A SyntaxHighlighter Evolved WordPress plugin for Google Apps Script contributors

With my published content I like to include useful code snippets. As I published on a self-hosted WordPress blog I’ve used plugins to help format the code to make it easier to understand and also aesthetically look nice. In this post I share a WordPress plugin I’ve developed for Google Apps Script syntax highlighting.

Source: A SyntaxHighlighter Evolved WordPress plugin for Google Apps Script contributors

Totally Unscripted: Modernize your Workspace Editor Add-ons development with Angular – Thur 25 Feb at at 1200 PST / 1500 EST / 2000 UTC

We all love the flexibility HTMLService gives us when developing Google Workspace Editor Add-ons, but what happens when you need to scale your production? Web application frameworks provide a way to deploy and develop your code in a structured way making it easier to maintain your code base. Angular is one open-source web application framework that can be used to modernize your Workspace Editor Add-on development. In this episode we are joined by Spencer Easton who will share how Amplified IT have adopted Angular for their Add-on development. As part of this we will explore the benefits using Angular including a component-based architecture, internationalization and performance.

Tune in live to contribute to the YouTube live chat (recording immediately available). – https://youtu.be/mtDsScbfRIU

For previous episodes, information and resources visit https://tu.appsscript.info/

Hackers abuse Google Apps Script to steal credit cards, bypass CSP

Image: Google

Attackers are abusing Google’s Apps Script business application development platform to steal credit card information submitted by customers of e-commerce websites while shopping online.

Interesting report highlighting how Google Apps Script is being exploited as a vector to skim card data. The post is worth reading for more details but in short the script.google.com address for webapps is being used as a trusted domain to avoid detection. The post also mentions how Google Analytics is being used for a similar exploit.  How this will all play out is yet to be seen.

Source: Hackers abuse Google Apps Script to steal credit cards, bypass CSP