fatGoogleOAuth
fatGoogleOAuth = 4
Example
procedure ConfigureGoogleOAuth(Client: TvxHTTP);
begin
Client.AuthType := fatGoogleOAuth;
Client.GrantType := gtAuthCode;
Client.Scope := 'https://www.googleapis.com/auth/userinfo.email openid';
end;
Usage
fatGoogleOAuth selects Google OAuth using Velox's built-in Google endpoints and mail/openid scope defaults.
Important compatibility boundary
With gtAuto, Velox selects client credentials for Google. Google user-data and mail access commonly requires an interactive or user-authorised flow instead. Do not assume that the Velox default is accepted by the chosen Google API or Workspace policy. Select and test the provider-approved grant, consent, account and scope configuration; an explicit gtAuthCode is shown only as a configuration example, not as a universal prescription.
Velox does not validate consent configuration when this member is assigned. Missing ClientId/Secret, a rejected grant, scope mismatch, callback mismatch or provider policy failure appears during authorization. Tokens and credentials are secrets, and HTTPS/certificate validation remains a separate transport responsibility.
fatGoogleOAuth is a provider preset, not a guarantee that every Google API is supported. The default HTTP scope is mail/openid-oriented, so override it for a different resource and verify the returned token's audience and scopes.
Additional Technical Info
fatGoogleOAuth is ordinal 4 of TvxAuthType. Velox supplies these current defaults when the corresponding property is blank:
| Setting | Source-defined default |
|---|---|
| Authorization endpoint | https://accounts.google.com/o/oauth2/auth |
| Token endpoint | https://accounts.google.com/o/oauth2/token |
| Logout endpoint | https://www.google.com/accounts/Logout |
| SMTP/IMAP/POP/HTTP scope | https://mail.google.com/ openid |
gtAuto provider grant | gtClientCredentials |
| Mail SASL mechanism | XOAUTH2 |
Nonblank AuthURL, TokenURL and Scope override the table. After acquisition Velox supplies the access token to bearer/XOAuth2 authentication.
Related Code Library entries
TvxHTTP.GrantType,ScopeandCallbackURL.fatCustomOAuth- explicit provider contract without Google defaults.
External references
- Google OAuth 2.0 for web-server applications - provider flow and consent requirements.
- RFC 6749: OAuth 2.0 - protocol framework.