GoogleConsts.cs out of sync with Discovery document for Google's OpenID Connect

[LindaLawton]

GoogleConsts.cs apears to be out of sync with the Google's OpenID Connect

public const string AuthorizationUrl = "https://accounts.google.com/o/oauth2/auth";
public const string TokenUrl = "https://accounts.google.com/o/oauth2/token";

We may want to update to the newer endpoints which are OpenIDConnect compliant.

"authorization_endpoint": "https://accounts.google.com/o/oauth2/v2/auth",
 "token_endpoint": "https://www.googleapis.com/oauth2/v4/token",

Question: Is it worth adding something in the build to read the discovery doc and update GoogleConst.cs if there has been a change in the endpoint?

[jskeet]

@jtattermusch who knows more about auth than I do - Jan, are you aware of anything this would break?

[LindaLawton]

Theoretically speaking it shouldn't break anything its just a new end point. I believe the response is the same from the new endpoint but i can test it.

[jtattermusch]

It looks fine, but I'm not knowledgeable about this, sorry.

[LindaLawton]

Google Oauth has been a hobby of mine for a while. I am looking into adding the ability to verify the id_token that is returned. As far as I can see we don't currently have that functionality.

[chrisdunelm]

Fixed in #952, release v1.23