signin

type Options struct {
	// Nonce is a one-time value from your server. It comes back inside the
	// ID token, so a stolen token can't be replayed.
	Nonce string `json:"nonce,omitempty"`
	// IOSClient is Google's iOS OAuth client ID. Google only.
	IOSClient string `json:"iosClient,omitempty"`
	// AndroidClient is Google's Web OAuth client ID: that kind, not the
	// Android one, which only has to exist. Google only.
	AndroidClient string `json:"androidClient,omitempty"`
}

type User struct {
	Provider string `json:"provider"` // "apple" or "google"
	ID       string `json:"id"`       // theirs for life at that provider
	Email    string `json:"email"`    // their address; Apple may give a private relay
	Name     string `json:"name"`     // their name, when known
	IDToken  string `json:"idToken"`  // for your server to check with Verify
	// Code is Apple's one-time authorization code, for a server that wants
	// refresh tokens. Empty for Google.
	Code string `json:"code"`
}

type Verification struct {
	// Audiences are your client IDs: Apple's is the app's bundle ID,
	// Google's are the ones in Options. A token for another app is refused.
	Audiences []string
	// Nonce is the value you gave the phone. Empty skips the check.
	Nonce string
}