Justin Poehnelt

Posted on May 5, 2023 • Originally published at justin.poehnelt.com on Apr 10, 2023

Verify a Google access token

A Google access token can be verified using the following command to an Oauth2 endpoint:

curl "https://www.googleapis.com/oauth2/v1/tokeninfo?access_token=$GOOGLE_ACCESS_TOKEN"

The response will include the scope and additional information about the access token similar to the following for a service account access token:

{
  "issued_to": "1068863916064001234",
  "audience": "1068863916064001234",
  "user_id": "1068863916064001234",
  "scope": "https://www.googleapis.com/auth/userinfo.email openid",
  "expires_in": 3555,
  "email": "my-service-account@my-project.iam.gserviceaccount.com",
  "verified_email": true,
  "access_type": "online"
}