upt

README.md

@@ -52,6 +52,7 @@ Env promenne lze nahradit primo v requestu:
 - `GOOGLE_SERVICE_ACCOUNT_EMAIL`: `serviceAccountEmail` nebo `X-Google-Service-Account-Email`
 - `GOOGLE_PRIVATE_KEY`: `privateKey` nebo `X-Google-Private-Key`
 - `GOOGLE_SCOPES`: `scope`, `scopes` nebo `X-Google-Scopes`
+- `GOOGLE_SERVICE_ACCOUNT_JSON`: `serviceAccountJson`, `serviceAccountJsonEnv`, `X-Google-Service-Account-Json`, `X-Google-Service-Account-Json-Env`
 - `GOOGLE_ACCESS_TOKEN`: `Authorization: Bearer <token>`, `accessToken`, `accessTokenEnv`, `X-Google-Access-Token`, `X-Google-Access-Token-Env`
 - `GOOGLE_API_KEY`: `apiKey`, `apiKeyEnv`, `X-Google-Api-Key`, `X-Google-Api-Key-Env`
 
@@ -143,6 +144,31 @@ POST /google/sheets/write-by-url
 
 `mode=append` prida radky pod existujici data. `mode=update` prepise bunky od `startCell`.
 
+Stejny endpoint lze volat primo se service account JSON. V tom pripade se neposila `Authorization` header; sluzba si z `client_email` a `private_key` sama vystavi access token:
+
+```json
+{
+  "spreadsheetUrl": "https://docs.google.com/spreadsheets/d/1abcDEFghiJKLmnopQRstuVWXyz/edit#gid=0",
+  "sheetName": "Objednavky",
+  "mode": "append",
+  "values": [
+    ["2026-06-15", "ACME", 1234]
+  ],
+  "serviceAccountScopes": [
+    "https://www.googleapis.com/auth/spreadsheets"
+  ],
+  "serviceAccountJson": {
+    "type": "service_account",
+    "project_id": "project-id",
+    "private_key_id": "key-id",
+    "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
+    "client_email": "service-account@project-id.iam.gserviceaccount.com",
+    "client_id": "123456789",
+    "token_uri": "https://oauth2.googleapis.com/token"
+  }
+}
+```
+
 ## OAuth postup
 
 1. Zavolej `GET /google/oauth/scopes` a vyber scopes podle sluzeb.