CODEWITHSUNDEEP
google-oauth
Stack Exchange
Stack Exchange

Reputation: 1

Is it possible to determine verify the client_id with an access_token

Is it possible to determine the originating client_id of an access_token by calling a google api with the access_token?

Upvotes: 0

Views: 44

Answers (1)

Tim Bray
Tim Bray

Reputation: 1663

There's no documented API for introspecting access tokens, but there is the tokeninfo endpoint:

curl https://www.googleapis.com/oauth2/v1/tokeninfo?id_token=

I wouldn’t be too eager to put an https round trip in a production workflow, though.

Upvotes: 1

Related Questions