mavmaso
I already have google auth in my front(react) that returns to me:
access_token, expires_in, id_token, login_hint, scope, session_state.
All that data that google returns to my front. Now I just want to verify if this token its right. I know I can do it via this endpoint: https://oauth2.googleapis.com/tokeninfo?id_token=ID_TOKEN
But, it is another way via any hex ?
Where Next?
Trending in Questions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Catch errors, track performance, monitor hosts and more.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixirconf-us
- #blog-post
- #ai
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #hex
- #security
- #metaprogramming
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Producing high quality Elixir screencasts since 2017.
**Building the future of software with AI, trust, and human connection.**
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 1- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
tangui
An ID Token is digitally signed and usually doesn’t require calling back a service to determine whether it is valid or not. Instead the signature can be verified locally, using the keys published by Google (see the
jwksmember of https://accounts.google.com/.well-known/openid-configuration).There are some libraries such as
JOSE,JokenorOpenIDConnectwhich can be used to verify the signature.I have also not long ago released
Plugoidwhich relies on theOIDClibrary, which has an ID Token verification function (OIDC.IDToken.verify/3).