authentication and tokenoauth

Hi all How can I validate the Google authentication in my back-end? How do I verify the token? oauth standard

12 Replies

kapa.ai•17mo ago

Hey @Deleted User! I'm the kapa.ai support bot. I've searched through the docs to try to answer your question. :wave:

kapa.ai•17mo ago

---------------------- Hmm, I don't know enough to give you a confident answer yet. However, you can check out the Google Auth example (https://refine.dev/docs/examples/auth-provider/google-auth) in the refine documentation for more information on implementing Google authentication in your refine project. ----------------------

Google Auth | refine

You can use Google Login to control access and provide identity for your app. This example will guide you through how to connect Google Login into your project using refine.

kapa.ai•17mo ago

<@1073419683014922323> kapa.ai is still learning and improving, please let us how it did by reacting below

Omer•17mo ago

Hello @Deleted User , Thank you for contacting us. It seems that the question you asked is not related to Refine. You can find different solutions by conducting the necessary searches on Google.

extended-salmon•17mo ago

@Omer ok is there an example or things that I need to know for client side ?

national-gold•17mo ago

you can find auth examples here: https://refine.dev/docs/examples/?tags=auth-provider google example here: https://refine.dev/docs/examples/auth-provider/google-auth/

extended-salmon•17mo ago

Thank you I understand that I need to change here only the ClientID in the login.tsx page and rest will handle in the backend right ? another question, is useLogout hook call: htp:/localhost:PORT/logout ? @alicanerdurmaz @Omer

national-gold•17mo ago

useLogout calls authProvider.logout function and yes 🚀

extended-salmon•17mo ago

where I should add the server url for the auth in google auth example ? @Omer @alicanerdurmaz

national-gold•17mo ago

what do you mean by server url ? google login works with library. see: https://github.com/refinedev/refine/blob/master/examples/auth-google-login/public/index.html#L25 after you add this script, you will access google's login API by window.google

extended-salmon•17mo ago

I use passport.js so I need to add in the client side the api of the login that exist in server side to move me to the google auth page we can see in the image example

national-gold•17mo ago

server and client should use same google id

on Client
1. login with google on client side, get `token`.
2. save  on somewhere (in memory, localStorage, cookie)
3. add this `token` to header and send to API on every request.

on Server
1. when server get request, get token with header.
2. send this token to google server, check token is valid. (you can add other logics to improve security.  compare email etc.)
3. if token is valid, send data

server and client should use same google id

on Client
1. login with google on client side, get `token`.
2. save  on somewhere (in memory, localStorage, cookie)
3. add this `token` to header and send to API on every request.

on Server
1. when server get request, get token with header.
2. send this token to google server, check token is valid. (you can add other logics to improve security.  compare email etc.)
3. if token is valid, send data

i'm only familiar with this workflow, and our google example shows this flow. probably you can easily implement passport.js or another auth flows but i'm not familiar