如何使用Google登录身份验证我的应用程序？

Question

I have googled some info but still not undersant exactly how to auth my app with my server side.

I have Google LogIn button, as far as i understand when i click it, i sent request token, then i get back acsess token and can use it to get info from Google API,

but issue is what i should to do to auth the current user with my DB? It is ok that i get a acsess from google to use API, but what about my DB, what i should to do next, how i can concatenate it google logIn and my DB?

Could anybody help me to understand consept of auth and registration user in my DB with Google LogIn button?

Answer 1

Well the basic concept is the following:

1. Do the Google Login with the option to request an IdToken
2. Send the IdToken to your server
3. Check if the IdToken is valid by using one of the Google API Client libraries (here is one for Python )
4. After the token is verified you'll receive a payload which includes the userId - you can use this userId to identify the user in your backend.

Following a picture of the whole procedure described above:

See the corresponding Blog-Post as well.

Answer 2

这可能有助于您自己的oauth2服务器http://bshaffer.github.io/oauth2-server-php-docs/cookbook/