Question Regarding Additional Google People API Request in OAuth Flow #1320
Closed
MaximZemskov
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hi,
I have been implementing OAuth with Google using the FastAPI Users library and noticed that after obtaining the OAuth token, the library makes an additional request to the Google People API to fetch the user's ID and email.
Considering that the id_token obtained during the OAuth process usually contains this information (user ID and email), I was curious about the rationale behind this implementation choice.
Is there a specific reason for making this additional API request instead of using the id_token directly? Would it be more efficient or preferable in certain scenarios to utilize the id_token for this purpose?
I'm looking forward to understanding this aspect better, and any insights you could provide would be greatly appreciated.
Thank you!
Beta Was this translation helpful? Give feedback.
All reactions