feat: [AppsChat] Addition of app auth support for chat api (#8479)

* feat: Addition of app auth support for chat api
docs: Update reference documentation for createSpace,updateSpace,deleteSpace,createMembership,updateMembership,deleteMembership and the newly added field -customer- in space.proto

PiperOrigin-RevId: 788882030

Source-Link: googleapis/googleapis@f6801ce

Source-Link: googleapis/googleapis-gen@34024b5
Copy-Tag: eyJwIjoiQXBwc0NoYXQvLk93bEJvdC55YW1sIiwiaCI6IjM0MDI0YjU5NGMzNzE0ZWQ2YTQxMTgwNTAwN2ZjNGQ2MjQ0ZWE2MzIifQ==

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

Author: gcf-owl-bot[bot]

AppsChat/metadata/Chat/V1/ChatService.php

@@ -33,9 +33,14 @@
  * [import process](https://developers.google.com/workspace/chat/import-data)
  * for the specified space and makes it visible to users.
  *
- * Requires [app
- * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-app)
- * and domain-wide delegation. For more information, see [Authorize Google
+ * Requires [user
+ * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
+ * and domain-wide delegation with the [authorization
+ * scope](https://developers.google.com/workspace/chat/authenticate-authorize#chat-api-scopes):
+ *
+ * - `https://www.googleapis.com/auth/chat.import`
+ *
+ * For more information, see [Authorize Google
  * Chat apps to import
  * data](https://developers.google.com/workspace/chat/authorize-import).
  *

AppsChat/metadata/Chat/V1/Space.php

@@ -39,7 +39,11 @@
  * permissions](https://support.google.com/a/answer/12850085).
  *
  * Requires [user
- * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user).
+ * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
+ * with the [authorization
+ * scope](https://developers.google.com/workspace/chat/authenticate-authorize#chat-api-scopes):
+ *
+ * - `https://www.googleapis.com/auth/chat.customemojis`
  *
  * This sample has been automatically generated and should be regarded as a code
  * template only. It will require modifications to work:

AppsChat/metadata/Chat/V1/User.php

@@ -42,21 +42,35 @@
  * - [App
  * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-app)
  * with [administrator approval](https://support.google.com/a?p=chat-app-auth)
- * in [Developer Preview](https://developers.google.com/workspace/preview)
+ * and the authorization scope:
+ * - `https://www.googleapis.com/auth/chat.app.memberships`
  *
  * - [User
  * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
- * You can authenticate and authorize this method with administrator
- * privileges by setting the `use_admin_access` field in the request.
+ * with one of the following authorization scopes:
+ * - `https://www.googleapis.com/auth/chat.memberships`
+ * - `https://www.googleapis.com/auth/chat.memberships.app` (to add the
+ * calling app to the space)
+ * - `https://www.googleapis.com/auth/chat.import` (import mode spaces
+ * only)
+ * - User authentication grants administrator privileges when an
+ * administrator account authenticates, `use_admin_access` is `true`, and
+ * the following authorization scope is used:
+ * - `https://www.googleapis.com/auth/chat.admin.memberships`
+ *
+ * App authentication is not supported for the following use cases:
+ *
+ * - Inviting users external to the Workspace organization that owns the
+ * space.
+ * - Adding a Google Group to a space.
+ * - Adding a Chat app to a space.
  *
  * For example usage, see:
  *
  * - [Invite or add a user to a
  * space](https://developers.google.com/workspace/chat/create-members#create-user-membership).
- *
  * - [Invite or add a Google Group to a
  * space](https://developers.google.com/workspace/chat/create-members#create-group-membership).
- *
  * - [Add the Chat app to a
  * space](https://developers.google.com/workspace/chat/create-members#create-membership-calling-api).
  *

AppsChat/samples/V1/ChatServiceClient/complete_import_space.php

@@ -32,10 +32,21 @@
  * Creates a message in a Google Chat space. For an example, see [Send a
  * message](https://developers.google.com/workspace/chat/create-messages).
  *
- * The `create()` method requires either [user
+ * Supports the following types of
+ * [authentication](https://developers.google.com/workspace/chat/authenticate-authorize):
+ *
+ * - [App
+ * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-app)
+ * with the authorization scope:
+ * - `https://www.googleapis.com/auth/chat.bot`
+ * - [User
  * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
- * or [app
- * authentication](https://developers.google.com/workspace/chat/authorize-import).
+ * with one of the following authorization scopes:
+ * - `https://www.googleapis.com/auth/chat.messages.create`
+ * - `https://www.googleapis.com/auth/chat.messages`
+ * - `https://www.googleapis.com/auth/chat.import` (import mode spaces
+ * only)
+ *
  * Chat attributes the message sender differently depending on the type of
  * authentication that you use in your request.
  *

AppsChat/samples/V1/ChatServiceClient/create_custom_emoji.php

@@ -35,7 +35,14 @@
  * message](https://developers.google.com/workspace/chat/create-reactions).
  *
  * Requires [user
- * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user).
+ * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
+ * with one of the following [authorization
+ * scopes](https://developers.google.com/workspace/chat/authenticate-authorize#chat-api-scopes):
+ *
+ * - `https://www.googleapis.com/auth/chat.messages.reactions.create`
+ * - `https://www.googleapis.com/auth/chat.messages.reactions`
+ * - `https://www.googleapis.com/auth/chat.messages`
+ * - `https://www.googleapis.com/auth/chat.import` (import mode spaces only)
  *
  * @param string $formattedParent The message where the reaction is created.
  *

AppsChat/samples/V1/ChatServiceClient/create_membership.php

@@ -29,28 +29,49 @@
 use Google\Apps\Chat\V1\Space;
 
 /**
- * Creates a space with no members. Can be used to create a named space, or a
+ * Creates a space. Can be used to create a named space, or a
  * group chat in `Import mode`. For an example, see [Create a
  * space](https://developers.google.com/workspace/chat/create-spaces).
  *
- * If you receive the error message `ALREADY_EXISTS` when creating
- * a space, try a different `displayName`. An existing space within
- * the Google Workspace organization might already use this display name.
- *
  * Supports the following types of
  * [authentication](https://developers.google.com/workspace/chat/authenticate-authorize):
  *
  * - [App
  * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-app)
  * with [administrator approval](https://support.google.com/a?p=chat-app-auth)
- * in [Developer Preview](https://developers.google.com/workspace/preview)
+ * and one of the following authorization scopes:
+ * - `https://www.googleapis.com/auth/chat.app.spaces.create`
+ * - `https://www.googleapis.com/auth/chat.app.spaces`
  *
  * - [User
  * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
+ * with one of the following authorization scopes:
+ * - `https://www.googleapis.com/auth/chat.spaces.create`
+ * - `https://www.googleapis.com/auth/chat.spaces`
+ * - `https://www.googleapis.com/auth/chat.import` (import mode spaces
+ * only)
  *
  * When authenticating as an app, the `space.customer` field must be set in
  * the request.
  *
+ * When authenticating as an app, the Chat app is added as a member of the
+ * space. However, unlike human authentication, the Chat app is not added as a
+ * space manager. By default, the Chat app can be removed from the space by
+ * all space members. To allow only space managers to remove the app from a
+ * space, set `space.permission_settings.manage_apps` to `managers_allowed`.
+ *
+ * Space membership upon creation depends on whether the space is created in
+ * `Import mode`:
+ *
+ * * **Import mode:** No members are created.
+ * * **All other modes:**  The calling user is added as a member. This is:
+ * * The app itself when using app authentication.
+ * * The human user when using user authentication.
+ *
+ * If you receive the error message `ALREADY_EXISTS` when creating
+ * a space, try a different `displayName`. An existing space within
+ * the Google Workspace organization might already use this display name.
+ *
  * This sample has been automatically generated and should be regarded as a code
  * template only. It will require modifications to work:
  *  - It may require correct/in-range values for request initialization.

AppsChat/samples/V1/ChatServiceClient/create_message.php

@@ -42,7 +42,11 @@
  * permissions](https://support.google.com/a/answer/12850085).
  *
  * Requires [user
- * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user).
+ * authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-user)
+ * with the [authorization
+ * scope](https://developers.google.com/workspace/chat/authenticate-authorize#chat-api-scopes):
+ *
+ * - `https://www.googleapis.com/auth/chat.customemojis`
  *
  * @param string $formattedName Resource name of the custom emoji to delete.
  *