CODEWITHSUNDEEP
oauth-2.0google-oauth
Kevin Brady
Kevin Brady

Reputation: 1724

Is there easy way to find list of authorised scopes for Google Access Token

If I have a valid Google Access token, is there an easy way to find out what scopes this token is valid for? This issue has arisen because the scopes were not saved when the user initially authorised the token.

Upvotes: 8

Views: 3262

Answers (1)

Owen Cao
Owen Cao

Reputation: 8183

The only way you can find the scope of a token is to validate this token by this API:

https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=YOUR_TOKEN

And you'll get a response which includes the scope and other pieces of information like this:

{
  "audience":"8819957365.apps.googleusercontent.com",
  "user_id":"123456789",
  "scope":"https://www.googleapis.com/auth/userinfo.profile https://www.googleapis.com/auth/userinfo.email",
  "expires_in":3500
}

See the Google Developer documentation for more info.

Upvotes: 16

Related Questions