1

As the title says, I want to create a RESTful API (stateless) that will access Google API endpoints. First I want to authenticate the user and then use that token provided by Google to access Google Calendar API.

This is the current flow of the app:

enter image description here

Is there any other way to achieve this since my Nodejs service is signing an already signed JWT token provided by Google (I need to track expiration times for both access tokens)?

I am doing this because I don't want to use Google's access token for my own endpoint authentication.

Improve this question
3
  • Why are you re-signing JWT of Google? That is already signed.
    – defalt
    Feb 9 at 13:06
  • @defalt to protect my own API routes (I can verify using secret the identity of the sender)
    – ktop
    Feb 9 at 13:50
  • Then your current design is fine. The lifespan of your signature should not exceed the expiry of the access token.
    – defalt
    Feb 10 at 11:47

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .