Verify a Google access token

Justin Poehnelt - May 5 '23 - - Dev Community

A Google access token can be verified using the following command to an Oauth2 endpoint:

curl "https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=$GOOGLE_ACCESS_TOKEN"
Enter fullscreen mode Exit fullscreen mode

The response will include the scope and additional information about the access token similar to the following for a service account access token:

{
  "issued_to": "1068863916064001234",
  "audience": "1068863916064001234",
  "user_id": "1068863916064001234",
  "scope": "https://www.googleapis.com/auth/userinfo.email openid",
  "expires_in": 3555,
  "email": "my-service-account@my-project.iam.gserviceaccount.com",
  "verified_email": true,
  "access_type": "online"
}
Enter fullscreen mode Exit fullscreen mode
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Terabox Video Player