You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
core: trash/delete/share/delete_event/delete_worksheet return False only when the resource doesn't exist; any other failure (auth, permissions, rate limit, 400) raises a GSuiteError instead of also returning False. get_event/Drive.get no longer turn arbitrary exceptions into None, and Gmail.get_signature only tolerates API errors.
api: the API now fails closed. Without GSUITE_API_KEY every request gets a 401; deployments protected some other way (Cloud Run IAM, localhost) must set GSUITE_ALLOW_NO_API_KEY=true. The default host is 127.0.0.1 (settings and gsuite serve), CORS is off unless GSUITE_CORS_ORIGINS is set, error bodies are RFC 9457 problem details instead of {"detail": ...}, and the admin key is only read from the X-Admin-Key header.