# Google Token Verifier

Small Vercel endpoint used by the China-hosted API to verify Google ID tokens from an overseas network.

## Environment Variables

- `GOOGLE_TOKEN_VERIFIER_SECRET`: shared bearer token. Use the same value in the API.
- `GOOGLE_OAUTH_CLIENT_IDS`: comma-separated Google OAuth client IDs allowed for this app.

## Endpoint

`POST /api/verify-google-token`

Headers:

```http
Authorization: Bearer <GOOGLE_TOKEN_VERIFIER_SECRET>
Content-Type: application/json
```

Body:

```json
{
  "id_token": "google-id-token"
}
```

Success response:

```json
{
  "subject": "google-sub",
  "email": "user@example.com",
  "email_verified": true,
  "name": "User Name",
  "picture": "https://...",
  "audience": "google-client-id",
  "issuer": "https://accounts.google.com"
}
```

## Deploy

Deploy this directory as an independent Vercel project. Point the API env var `GOOGLE_TOKEN_VERIFIER_URL` to the full endpoint URL, for example:

```text
https://your-project.vercel.app/api/verify-google-token
```