We have website that allows Google Sign-In, which is connected to a GCP project (project A). (Basically our web page gets a token from Google sign-in, passes it to our API, and
