A modern programming language that makes developers happier.

kotlinlang

Did we validate the google id token on the server side?

<https://developers.google.com/identity/gsi/web/guides/verify-google-id-token>

I'd say yes. There's a firebase `verifyToken` call: <https://github.com/joreilly/Confetti/blob/9a39c6dc0e24f8955c35ace20611abcdca6ef8d5/backend/service-graphql/src/main/kotlin/dev/johnoreilly/confetti/backend/firebase.kt#L28|https://github.com/joreilly/Confetti/blob/9a39c6dc0e24f8955c35ace20611abcdca6ef8d5[…]ql/src/main/kotlin/dev/johnoreilly/confetti/backend/firebase.kt>