Closed
Description
Description
Google provides token-info endpoint, which can be used to see some data about Google token. It is better than user-info endpoint as it provides data about azp
and aud
and scope
and hence could be used to introspect more data about Google token. Some details: https://docs.google.com/document/d/1hmUpMfvAwyRBvUhCD01IEGNjx1yIh9a8FpGCQlmrOno/edit?tab=t.0#heading=h.ptu7z1gumjz
This issue is about adding support to GoogleIdentityProvider
for verification of the external Google token. This is supposed to be done for external-internal-token-exchange:v2 ( token-exchange:v1 should still work as before).