futurenda / google-auth-id-token-verifier Goto Github PK

I node.js when doing the verification I can get the user id
const id= ticket.getPayload()['sub'];

but in this library this value does not exists

Because of:

http.DefaultTransport and http.DefaultClient are not available in App Engine. See https://cloud.google.com/appengine/docs/go/urlfetch/

Solution would be to make it possible to parametrize a http.Client param when creating the Verifier object eg. via ClientOptions.

golang.org/x/oauth2/jws is now deprecated.
What is the alternative?

Hello, would it make sense to make it possible for the VerifyIDToken() function allow for giving an empty list of AUDs so that it would just do the JWT verification against the certs and let the app check for the AUDs later on after Decode?

For example, this is how Firebase Admin SDK does it: https://github.com/firebase/firebase-admin-go/blob/master/auth/auth.go#L172

-> you simply call VerifyIDToken() and get a decoded Token info if it verifies.