Refactor authentication to set scope per API call instead of globally Closes #93

[ParthaI]

Example query results

Results

> select * from googleworkspace_drive_my_file
+----------------------------------------------+-------------------------------------------------------+-----------------------------------------+--------->
| id                                           | name                                                  | mime_type                               | drive_id>
+----------------------------------------------+-------------------------------------------------------+-----------------------------------------+--------->
| 11iXfj-RHpFsil7_hNK-oQjCqmBLlDfCvju2AOF-ieb4 | Google Sheets Plugin - Sample School Data             | application/vnd.google-apps.spreadsheet | <null>  >
|                                              |                                                       |                                         |         >
| 1bHXUEanSoL4iWdnyOQpp3_mscWfKj_h4Sm1kV8j1gT8 | Copy of Sample School Data                            | application/vnd.google-apps.spreadsheet | <null>  >

 select * from googleworkspace_activity_report where application_name = 'admin'
+---------------------------+---------------------+------------+------------------------------------------------------------------------------------------->
| time                      | actor_email         | event_name | event_names                                                                               >
+---------------------------+---------------------+------------+------------------------------------------------------------------------------------------->
| 2025-07-15T21:28:36+05:30 | [email protected] | <null>     | ["SECURITY_INVESTIGATION_QUERY"]                                                          >
| 2025-06-04T14:15:50+05:30 | [email protected] | <null>     | ["AUTHORIZE_API_CLIENT_ACCESS"]                                                           >
| 2025-07-15T21:20:49+05:30 | [email protected] | <null>     | ["ALERT_CENTER_VIEW"]                                                                     >
| 2025-07-15T21:43:00+05:30 | [email protected] | <null>     | ["AUTHORIZE_API_CLIENT_ACCESS"]         

[Copilot]

Pull Request Overview

This PR refactors Google Workspace authentication to set OAuth scopes per service/table instead of using a global scope configuration. The change allows for more granular permission requests based on the specific Google service being accessed.

• Modified service creation functions to pass service-specific OAuth scopes
• Updated authentication functions to accept and use dynamic scopes instead of hardcoded global scopes
• Enhanced token source caching to use scope-based cache keys for better isolation

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}