I have Google SSO setup within my web app that POSTs the id_token value to my server, which uses google-auth-library to decode the payload. Very recently, I keep on
google-auth-library