How to get 'sub' or id_token from Google API's oAuth2Client in NodeJS

Question

I am using oAuth2Client to access a user's Google Analytics property. Their refresh token is saved for future use. However, because the user could add multiple properties, I need to assign the refresh token to the user's Google account, not the GA Property. It looks like I should be able to identify Google accounts by their 'sub' string. This should be accessible within either the token_id or the credentials. I have tried both - token_id is not returned within the tokens object and credentials returns empty. Here is what I have tried:

import { google } from 'googleapis';
...
//POST token request to Google using received code
const oAuth2Client = new google.auth.OAuth2(client_id, client_secret, redirect_uri);
const tokenRes = await oAuth2Client.getToken(code);

console.log(JSON.stringify(oAuth2Client.credentials));//{}
console.log(JSON.stringify(tokenRes.tokens));//{'access_token':'abc123', 'refresh_token':'1//abc123', etcButNoIdToken}

Linda Lawton - DaImTo · Accepted Answer · 2023-09-05 16:09:20Z

1

The google analytics scopes dont give you any profile information.

Your should request the profile scope along with your request then you will be able to identify the current authorized user.

Tip: id tokens come from the sign-in or authencation. Not not the Oauth2 consent or authorization.

answered Sep 5, 2023 at 16:09

Linda Lawton - DaImTo

118k40 gold badges228 silver badges511 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Matthew Michaud Over a year ago

Thank you! Added the userinfo.profile scope and now id_token has the sub value. getTokenInfo has the sub value now too.

Collectives™ on Stack Overflow

How to get 'sub' or id_token from Google API's oAuth2Client in NodeJS

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related