CODEWITHSUNDEEP
phpandroidserver-sidegoogle-plus
xlar8or
xlar8or

Reputation: 611

PHP Google+ Plaform server side user verification and get access token

I'm using the Google+ Platform on my android app with PlusClient and all that good stuff.

When the user signs in he can interact with my PHP server to get some content, but on every request i want to verify if the user is who he says he is.

For that purpose, on every PHP request i ask for the id and access token so that i can call "https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=$accessToken" and check if the id is the same as on the access token.

Is this a valid server-side user auth verification method? If not, what is the best approach?

My other question is how do i get the access token when i connect with the PlusClient to send to the PHP server? Do i have to call the GoogleAuthUtil.getToken?

Upvotes: 0

Views: 614

Answers (1)

avianey
avianey

Reputation: 5813

YES, you'll need to use GoogleAuthUtil.getToken
That's actually what the PhotoHunt Android sample app do.
You just have to copy/paste the source code from https://developers.google.com/+/photohunt/android#authenticating_with_photohunt

sAccessToken = GoogleAuthUtil.getToken(ctx, account, "oauth2:" + Scopes.PLUS_LOGIN + " " + Scopes.PLUS_PROFILE);

Hope it helps

Upvotes: 2

Related Questions