Method handleGooglePOST

rest/google.go:29–52

POST /_google creates a google-based login session and sets its cookie.

()

// POST /_google creates a google-based login session and sets its cookie.
func (h *handler) handleGooglePOST() error {
	err := h.checkLoginCORS()
	if err != nil {
		return err
	}

	var params struct {
		IDToken string `json:"id_token"`
	}

	err = h.readJSONInto(&params)
	if err != nil {
		return err
	}

	// validate the google id token
	googleResponse, err := verifyGoogle(params.IDToken, h.server.Config.DeprecatedConfig.Google.AppClientID)
	if err != nil {
		return err
	}

	createUserIfNeeded := h.server.Config.DeprecatedConfig.Google.Register
	return h.makeSessionFromNameAndEmail(googleResponse.UserID, googleResponse.Email, createUserIfNeeded)
}

func verifyGoogle(idToken string, allowedAppID []string) (*GoogleResponse, error) {
	destUrl := googleTokenInfoURL + idToken