Google Workspace
Productivity User OAuth

Google Workspace

Connect Google Drive, Calendar, Gmail, and Sheets with fine-grained incremental scopes.

Auth Model

User OAuth

Standard OAuth 2.0 authorization. A user grants consent and receives an access token. Authpipe handles refresh, rotation, and health monitoring automatically.

Connection Flow

1
Your App
2
Authpipe
3
Google Workspace
@authpipe/node
// Get a valid credential — always fresh, zero latency
const { credential } = await authpipe.getCredential({
  provider: 'google-workspace',
  tenantId: 'org_acme',
  userId: 'user_123',
});
// Use the credential with the provider API
const response = await fetch('https://api.example.com/data', {
  headers: { Authorization: `Bearer ${credential}` },
});
@authpipe/react
// Drop-in React component
<ConnectButton
  provider="google-workspace"
  onSuccess={(conn) => console.log('Connected!', conn)}
/>

Available Scopes

Permissions you can request when connecting to Google Workspace.

https://www.googleapis.com/auth/userinfo.email

View the user's email address

https://www.googleapis.com/auth/userinfo.profile

View the user's basic profile info (name, photo)

https://www.googleapis.com/auth/drive.readonly

View and download all files in Google Drive

https://www.googleapis.com/auth/drive.file

View and manage files created or opened by the app in Drive

https://www.googleapis.com/auth/drive.metadata.readonly

View metadata for files and folders in Drive

https://www.googleapis.com/auth/drive

Full read-write access to all files in Google Drive

https://www.googleapis.com/auth/calendar.readonly

View calendar events and settings

https://www.googleapis.com/auth/calendar.events

View and edit events on all calendars

https://www.googleapis.com/auth/calendar

Full read-write access to Google Calendar

https://www.googleapis.com/auth/gmail.readonly

View email messages and settings

https://www.googleapis.com/auth/gmail.send

Send email on behalf of the user

https://www.googleapis.com/auth/gmail.compose

Create, read, update, and delete drafts; send messages

https://www.googleapis.com/auth/gmail.modify

Read, send, delete, and manage email and settings

https://www.googleapis.com/auth/spreadsheets.readonly

View Google Sheets spreadsheets

https://www.googleapis.com/auth/spreadsheets

View and manage Google Sheets spreadsheets

https://www.googleapis.com/auth/documents.readonly

View Google Docs documents

https://www.googleapis.com/auth/documents

View and manage Google Docs documents

https://www.googleapis.com/auth/presentations.readonly

View Google Slides presentations

https://www.googleapis.com/auth/presentations

View and manage Google Slides presentations

https://www.googleapis.com/auth/admin.directory.user.readonly

View users in the organization's directory

https://www.googleapis.com/auth/admin.directory.group.readonly

View groups in the organization's directory

What Authpipe handles for Google Workspace

OAuth Orchestration

PKCE, state validation, callback handling, and provider-specific quirks — all automatic.

Encrypted Vault

AES-256-GCM encryption with per-tenant key isolation. OAuth tokens, API keys, and webhook secrets — never exposed to the frontend.

Silent Refresh

Proactive token refresh before expiry. SDK returns from local cache with zero latency.

Health Monitoring

Scheduled checks detect revoked tokens and expired credentials before users notice.

More Productivity providers

Ready to connect Google Workspace?

Get your first 100 connections free. Set up in minutes with our SDK.