Validate an institution's stored Google token

Probes Google’s userinfo endpoint with the institution’s stored cloudServices.google.googleLoginToken to check whether it is still accepted. If Google rejects the token, the entire cloudServices.google subtree is cleared ($unset) and the response reports valid: false, cleared: true. The caller must hold institutions.edit on the target institution.

GET /api/auth/google/institution/{institutionId}/validate

Validate an institution's stored Google token

cURL

curl --request GET \
  --url https://pria.praxislxp.com/api/auth/google/institution/{institutionId}/validate \
  --header 'Authorization: Bearer <token>'

200

{
  "valid": true,
  "cleared": true,
  "message": "No Google tokens configured",
  "error": "<string>"
}

Authorizations

Authorization · string · header · required

JWT token passed in authorization header

Path Parameters

institutionId · string · required

ObjectId of the institution whose token to validate.

Response

200

application/json

Validation completed. Inspect valid for the outcome.

valid · boolean

Example:

true

cleared · boolean

True when an invalid token was just unset.

message · string

Set when no Google token is configured for the institution.

Example:

"No Google tokens configured"

error · string

Set on validation failure (passes through Google's error).