Google Cloud Endpoints with Google Identity Toolkit

My overall goal is to create a mobile and web app that allows multiple identity providers (google, Facebook, email / password) and uses a google endpoint for google (python) that pushes user authorization checks. I am trying to find the best way to do this.

Can I use the Google Identity Toolkit to pre-validate user authorization on the endpoint I want to secure? I can't seem to figure out how I would go about doing this. As far as I know, I would not be able to call endpoints.get_current_user () to check the user as it will only work with google + inputs.

I am also open to other suggestions (not using the identification toolbox)

Any help would be really appreciated

thank

+3


source to share


1 answer


You are correct that you cannot use the endpoints.get_current_user () method to validate the Identity Toolkit user.

To use the Identity Toolkit with cloud endpoints, you must use the built-in sessions to represent the user.



After the client has completed identity-based authentication, you must send the ID token to the entry endpoint, validate the token, then create a new session that you include in subsequent requests.

+2


source







All Articles