title: Google Federated Login (OpenID + OAuth 2)
body: <p>I'm trying to get OpenID working with OAuth 2 for using Google's API. I only want the user to have to "grant access" once when they login for the first time. Here is the flow I have so far:</p>
  
  <ol>
  <li>User clicks "Login with Google"</li>
  <li>My server signs in the User with OpenID. With federated login I receive an OAuth Request Token.</li>
  </ol>
  
  <p>From <a href="https://developers.google.com/accounts/docs/OpenID#oauth" rel="nofollow">https://developers.google.com/accounts/docs/OpenID#oauth</a> it says the next step is to exchange the request token for an access token. However, I see a couple problems with this:</p>
  
  <ol>
  <li>It is an OAuth 1 API call.</li>
  <li>It requires a verifier. Don't I need the user to "grant access" to receive the verifier? How is this federated?</li>
  </ol>
  
  <p>Thanks for any help!</p>