I have the first steps working for fastapi-users==12.0.0
with Google OAuth but I don't know what to do with the access_token
once I get it from /auth/google/callback
.
The fastapi
logs show User <user_id> has registered
and a new row is added into each table (user
, oauth_account
), so that's good.
So far I have:
GET /auth/google/authorize
which returns a JSON with anauthorization_url
.- I navigate to that
authorization_url
and authenticate via the prompts athttps://accounts.google.com/signin
. - I am redirected to
/auth/google/callback?state=<some_token>&scope=<email, profile, user scopes>=0&prompt=consent
, which shows{"access_token":<access_token>,"token_type":"bearer"}
.
What am I supposed to do with that access_token
? To access private endpoints do I need to include it in the header of every future request?
For this strictly google process, do I need to use any of the other endpoints (eg. /auth/jwt/login
, /auth/register
, /auth/request-verify-token
, /auth/verify
)?
How would I complete this process via the swagger docs? The Authorize form (OAuth2PasswordBearer
) currently shows Token URL: auth/jwt/login
and Flow: password
). I don't need to change that at all right?