Receive OAuth bearer token with firebase in payload

Question

I'm trying to receive an OAuth token with a payload similar to this:

  name John Jones
  iss https://securetoken.google.com/some-app-name
  aud some-app-name
  auth_time 1608697332
  user_id some-user-id
  sub some-sub
  iat 1608412332
  exp 1608342932
  email some@email.com
  email_verified true
  firebase
    identities
      google.com
         111342112511016950980
      email
         some@email.com
    sign_in_provider google.com

The part that is important is the firebase section. The issue I'm having is that the bearer token I'm receiving after using oauth is missing the firebase section. This is the payload I'm getting:

  iss https://accounts.google.com
  azp 1234.apps.googleusercontent.com
  aud 1234.apps.googleusercontent.com
  sub 163433232345016954635
  hd some.hd
  email some@email.com
  email_verified true
  at_hash f643f839471pxJ0gCsA
  name John Jones
  given_name John
  family_name Jones
  locale en
  iat 1601116597
  exp 1607510197

I'm using the following settings to receive a bearer token with the above payload:

Callback URL: https://oauth.retool.com/oauth/user/oauthcallback
Authorization URL: https://accounts.google.com/o/oauth2/auth
Access Token URL: https://oauth2.googleapis.com/token
Client ID: *****-*****.apps.googleusercontent.com
Client Secret: *********
Scope: profile email

My question is what settings or scope do I need to get a bearer token with firebase in the payload?

For extra information, I'm running this in retool to be able to retrieve a bearer token to use in requests to a graphql server that has an authentication guard. That guard is a firebase guard (it checks to see if it is a valid firebase user). The first payload I shared was from a bearer token generated by a client web application, and we want to access similar endpoints in our retool dashboard.

Receive OAuth bearer token with firebase in payload

0 Answers