auth

Google Auth

Authenticate via Google Sign-In ID token (Android Web Client OR iOS Client).

The aud claim differs per platform:

  • Android sends a token issued for GOOGLE_CLIENT_ID (Web OAuth Client).
  • iOS sends a token issued for GOOGLE_IOS_CLIENT_ID (from GoogleService-Info.plist::CLIENT_ID).

We verify the token WITHOUT passing audience= (the google library would only accept a single value) and then assert the decoded aud is in our allow-list. This keeps Android-only deploys backward-compatible: when GOOGLE_IOS_CLIENT_ID is empty, the allow-list collapses to the Web Client ID and behaviour is identical to the previous single-audience check.

post/api/auth/google

Request

  • Base URL: https://api.stellara.natlex.it (the document declares no server; this is the origin it was published from)
  • URL: https://api.stellara.natlex.it/api/auth/google
  • Auth: none declared

Request body

google_tokenstring required

Response

Successful Response

access_tokenstring required
refresh_tokenstring required
token_typestring
is_new_userboolean

Changes

No recorded changes to this operation across all 1 revision of this API.