Comment by fastest963

We take the OAuth2 token and make a call to the People API [0] to get the Person resourceName. Not sure if this is more stable than "sub" but we completely ignore that.

[0] https://developers.google.com/people/api/rest/v1/people/get