Cannot retrieve access_token (updated)

Hi, when I use web, the answer comes in the format: { id: string; email: string; name: string; familyName: string; givenName: string; imageUrl: string; serverAuthCode: string; authentication: { accessToken: string; idToken: string; }; }

and I can get accessToken, but when I use this implementation on android, the answer comes in a different format: { id: string; email: string; name: string; familyName: string; givenName: string; imageUrl: string; idToken: string; serverAuthCode: string; authentication: { idToken: string; }; } we get idToken 2 times and there is no accessToken field. How do I get accessToken? Maybe there is another way

Thank you, Alexandr

_Originally posted by @Alexandr-Pivovar in https://github.com/CodetrixStudio/CapacitorGoogleAuth/issues/32#issuecomment-638057611_

[gabsgasps]

the accessToken is missing in the native code https://github.com/CodetrixStudio/CapacitorGoogleAuth/blob/5d2165d0856328891f48c5c6fe383541f42edb1b/android/src/main/java/com/codetrixstudio/capacitor/GoogleAuth/GoogleAuth.java#L80

web code contains accessToken: https://github.com/CodetrixStudio/CapacitorGoogleAuth/blob/5d2165d0856328891f48c5c6fe383541f42edb1b/src/web.ts#L114

but the GoogleSignInAccount, don’t have accessToken. https://developers.google.com/android/reference/com/google/android/gms/auth/api/signin/GoogleSignInAccount

[Niravpatel129]

any solution? 😦

Hi @mghcs87 , sorry for the slow reply. I managed to take care of serverAuthCode on backend and it works just fine. I simply exchange it for access_token. Unfortunately I didn’t find the solution for access_code on android, but now I don’t feel the need to do it. My Ionic code looks similar to:

import '@codetrix-studio/capacitor-google-auth';
import { Plugins } from '@capacitor/core';
// ...
const GoogleUser = await Plugins.GoogleAuth.signIn();
server_auth_code = GoogleUser.serverAuthCode;

// then I pass this code to backend.

And backend python code:

def get_token_from_gapi(code):
    """Exchange serverAuthCode for access_token"""
    data = {
        "code": code,
        "client_id": CLIENT_ID,
        "client_secret": CLIENT_SECRET,
        "grant_type": "authorization_code",
    }
    r = requests.post("https://oauth2.googleapis.com/token", data=data)
    if r.status_code < 200 or r.status_code >= 300:
        raise HTTPError("Authorization using serverAuthCode failed.")
    token = r.json()["access_token"]
    return token

Please note that CLIENT_ID and CLIENT_SECRET are your credentials for web application, not for android (since this happens on backend). Good luck 🔥

I’m making the same call as you through postman and on my local client, I seem to be getting this error:

{
  "error": "invalid_grant",
  "error_description": "Bad Request"
}

I think that it could be the token being invalid, is there any setting you changed for your client to allow this API call to go through?