The newest version of Google Identity Toolkit has been released as Google Cloud's Identity Platform and Firebase Authentication. These products include upgraded client SDKs, open source UI libraries, session management and integrated email sending service for forgotten password flows.

Based on your needs, new projects should use either Identity Platform or Firebase Authentication. To migrate an existing project from Identity Toolkit, see the Identity Platform migration guide or Firebase Authentication migration guide.

Relyingparty: verifyPassword

Verifies the user entered password.

Request

HTTP request

POST https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword

Request body

In the request body, supply data with the following structure:

{
  "email": string,
  "password": string,
  "pendingIdToken": string,
  "captchaChallenge": string,
  "captchaResponse": string
}
Property name Value Description Notes
email string The email of the user.
password string The password inputed by the user.
pendingIdToken string The GITKit token for the non-trusted IDP, which is to be confirmed by the user.
captchaChallenge string The captcha challenge.
captchaResponse string Response to the captcha.

Response

If successful, this method returns a response body with the following structure:

{
  "kind": "identitytoolkit#VerifyPasswordResponse",
  "localId": string,
  "email": string,
  "displayName": string,
  "idToken": string,
  "registered": boolean,
  "photoUrl": string
}
Property name Value Description Notes
kind string The fixed string "identitytoolkit#VerifyPasswordResponse".
localId string The RP local ID if it's already been mapped to the IdP account identified by the federated ID.
email string The email returned by the IdP. NOTE: The federated login user may not own the email.
displayName string The name of the user.
idToken string The GITKit token for authenticated user.
registered boolean Whether the email is registered.
photoUrl string The URI of the user's photo at IdP