mavmaso
How to test the google auth token
I already have google auth in my front(react) that returns to me:
access_token, expires_in, id_token, login_hint, scope, session_state.
All that data that google returns to my front. Now I just want to verify if this token its right. I know I can do it via this endpoint: https://oauth2.googleapis.com/tokeninfo?id_token=ID_TOKEN
But, it is another way via any hex ?
Trending in Questions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Enabling companies to succeed by building software people love.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #deployment
- #library
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #channels
- #elixirconf
- #exunit
- #discussion
- #code-sync
- #javascript
- #podcasts
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixir-ls
- #phoenix_html
- #iex
- #blog-post
- #graphql
- #genstage
- #ai
- #elixirconf-us
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #hex
- #performance
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Practical resources that improve the lives of professional developers.
Develop your skills with books, videos, and courses.
Bringing learning, work and compliance together since 1987.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
First Post!
tangui
An ID Token is digitally signed and usually doesn’t require calling back a service to determine whether it is valid or not. Instead the signature can be verified locally, using the keys published by Google (see the
jwksmember of https://accounts.google.com/.well-known/openid-configuration).There are some libraries such as
JOSE,JokenorOpenIDConnectwhich can be used to verify the signature.I have also not long ago released
Plugoidwhich relies on theOIDClibrary, which has an ID Token verification function (OIDC.IDToken.verify/3).