Verify the integrity of Google ID token in Ruby -
i integrating google sign-in capability rails driven site. following guide @ https://developers.google.com/identity/sign-in/web/backend-auth, have run few problems.
the main hangup verify integrity of id token paragraph. outlines several steps verifying jwt, , states:
rather writing own code perform these verification steps, recommend using google api client library platform, or calling our
tokeninfo
validation endpoint.
i have been using tokeninfo
endpoint debugging, documentation states:
[the
tokeninfo
endpoint] suitable deployments fewer 100 monthly active users, debugging , informational purposes....
using 1 of google api client libraries recommended way validate google id tokens in production environment.
for java, google api client library includes googleidtokenverifier
object can verifiy id tokens.
for python, verify_id_token
function provided.
i have searched through docs google client api ruby gem (currently in alpha) google-auth-library-ruby gem have not been able find equivalent functionality.
is there equivalent of these ruby ?
update:
it appears https://code.google.com/p/google-id-token/ may this; however, project has not been updated since 2014.
i looking maintained project, preferably directly google.
the repository has moved here: https://github.com/google/google-id-token
looks actively maintained.
Comments
Post a Comment