clever ones.

I have the same challenge when authorising a Service Account to access Google Sheets. I only get the id_token in the response, not the access_token.

I suspect it may be something I need to add or change in the JWT Claim Set; therefore, I'm going to add the JSON output I receive in the browser when I post the id_token to https://www.googleapis.com/oauth2/v3/tokeninfo?id_token=... in a browser's address field. (I purposely changed some of the values in the "azp", "kid", and "sub" fields not to expose the actual values)

JSON
alg: RS256
aud: https://www.googleapis.com/auth/worksheets,https://www.googleapis.com/auth/drive
azp: [email protected]
email: [email protected]
email_verified: true
exp: 1733472669
iat: 1733469069
iss: https://accounts.google.com
kid: 8c2a80af3fc12f13f44b168b6d5d0226eb0173c2
sub: 903102654606255428851
typ: JWT

I have to use Groovy as the development platform because it is part of the ScriptRunner (from Adaptavist) in an Atlassian Jira Cloud environment.

I would greatly appreciate help or ideas to try to solve this challenge.

Thank you so much for your attention and participation. Ben