Use OAuth2 userinfo instead of deprecated Google+ API

onelittlefish · Mar 5, 2019 · d70d072 · d70d072 · onelittlefish · Mar 5, 2019
1 parent 2e1262d
commit d70d072
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/app/auth/auth.js b/app/auth/auth.js
@@ -11,11 +11,12 @@ passport.use(new GoogleStrategy({
 	clientID: config.auth.google.clientID,
 	clientSecret: config.auth.google.clientSecret,
 	callbackURL: baseUrl + '/auth/google/callback',
+	userProfileURL: "https://www.googleapis.com/oauth2/v3/userinfo",
 	passReqToCallback: true
 	},
 	function(req, accessToken, refreshToken, profile, done) {
 		console.log('authenticated');
-		var email = profile.emails[0].value;
+		var email = profile.email;
 		User.findOne({ email: email }, function(err, user) {
 			done(err, user);
 		});

diff --git a/app/auth/routes.js b/app/auth/routes.js
@@ -3,8 +3,7 @@ var passport = require('passport');
 
 app.get('/auth/google', passport.authenticate('google', {
 	scope: [
-		'https://www.googleapis.com/auth/plus.login',
-		'https://www.googleapis.com/auth/plus.profile.emails.read'
+		'email'
 	]
 }));