The newest version of Google Identity Toolkit has been released as Firebase Authentication. It includes upgraded client SDKs, open source UI libraries, session management and integrated email sending service for forgotten password flows.

New projects should use Firebase Authentication. To migrate an existing project from Identity Toolkit to Firebase Authentication, see the migration guide.

Relyingparty: verifyPassword

Verifies the user entered password.

Request

HTTP request

POST https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword

Request body

In the request body, supply data with the following structure:

{
  "email": string,
  "password": string,
  "pendingIdToken": string,
  "captchaChallenge": string,
  "captchaResponse": string
}
Property name Value Description Notes
email string The email of the user.
password string The password inputed by the user.
pendingIdToken string The GITKit token for the non-trusted IDP, which is to be confirmed by the user.
captchaChallenge string The captcha challenge.
captchaResponse string Response to the captcha.

Response

If successful, this method returns a response body with the following structure:

{
  "kind": "identitytoolkit#VerifyPasswordResponse",
  "localId": string,
  "email": string,
  "displayName": string,
  "idToken": string,
  "registered": boolean,
  "photoUrl": string
}
Property name Value Description Notes
kind string The fixed string "identitytoolkit#VerifyPasswordResponse".
localId string The RP local ID if it's already been mapped to the IdP account identified by the federated ID.
email string The email returned by the IdP. NOTE: The federated login user may not own the email.
displayName string The name of the user.
idToken string The GITKit token for authenticated user.
registered boolean Whether the email is registered.
photoUrl string The URI of the user's photo at IdP