0
1.7K
ViewsGoogle OAuth consent screen: How do I know the user grants the requested access?
I'm building an Angular application that uses the Google API Client Library for JavaScript and it requires user permissions at login.
Permission to access Google Drive is required, but it is not checked when the consent screen is initially displayed.
So I need to know if the user has checked that checkbox on the consent screen to make sure the app works correctly.
How do I know that from the JavaScript code?
·
Juan Pablo Isaza
1 answers
Answer question0
The response from the token endpoint (https://oauth2.googleapis.com/token) contains a scope field. This field tells you which scopes were actually granted:
{
"access_token": "ya29.A0...",
"expires_in": 3599,
"scope": "https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/userinfo.email openid",
"token_type": "Bearer",
"id_token": "ey..."
}
·
Juan Pablo Isaza
Report
Answer question