How to extract full information of the users using google one tap signin?

user_13845597 0
Viewed 1763

I am trying to create a platform for google my business and i have implemented one tap signin and in that i am getting the credentials but not the full information.here are my tried code

 <script>
      window.onload = function () {
        google.accounts.id.initialize({
          client_id: "clientid.apps.googleusercontent.com",
          callback: handleCredentialResponse,
        });
        google.accounts.id.prompt((notification) => {
          if (notification.isNotDisplayed() || notification.isSkippedMoment()) {
            console.log("opted out");
          }
        });
        function handleCredentialResponse(response) {
           console.log(response)
          // window.location = "https://github.com/";
        }
      };
    </script>

here is the response i am getting

{
  clientId:
    "clientid.apps.googleusercontent.com",
  credential:
    "eyJhbGciOiJSUzI1NiIsImtpZCI6ImYwNTQxNWIxM2FjYjk1OT…40Jk8v3LcOvtopFD_tI2HMlFjg0dK96XrqNiOD0H3Akl",
  select_by: "user",
};
google-my-business-api google-identity oauth-2.0 javascript
2 Answers

You can use this function to parse the JWT token:

function parseJwt (token) {
   var base64Url = token.split('.')[1];
   var base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/');
  var jsonPayload = decodeURIComponent(atob(base64).split('').map(function(c) {
    return '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2);
  }).join(''));

  return JSON.parse(jsonPayload);
};

and then you can do :

    function handleCredentialResponse(response) {
       //console.log(response)
      
        console.log(JSON.stringify(parseJwt(response.credential)));
    }

Result:

enter image description here

user_38995600

What do you mean by "full information"?

  1. An ID token is returned in the credential field. The id token contains some user's profile information, as defined in https://openid.net/specs/openid-connect-core-1_0.html#IDToken. To parse the ID token, you can find a library at https://openid.net/developers/jwt/ or https://jwt.io/.

  2. Google One Tap doesn't support to 1) return more profile information in the ID token; 2) load an access token so as to access more user profile data. You need to look at Google OAuth 2.0 documentation to find a way for loading access tokens.

In summary, Google One Tap is service optimized for basic 3P authentication scenarios (say, sign-in and sign-up, etc.). It doesn't cover, and doesn't want to cover, all possible OAuth 2.0 scenarios.

user_26388510
Related