Google sign in: validate client id

1 files changed, 1 insertions, 1 deletions

diff --git a/src/main/java/com/juick/www/api/ApiSocialLogin.java b/src/main/java/com/juick/www/api/ApiSocialLogin.java
index 5e17d2b77..02f16676f 100644
--- a/src/main/java/com/juick/www/api/ApiSocialLogin.java
+++ b/src/main/java/com/juick/www/api/ApiSocialLogin.java
@@ -230,7 +230,7 @@ public class ApiSocialLogin {
             throws GeneralSecurityException, IOException {
         logger.info("Token: {}", idTokenString);
         logger.info("Client: {}", googleClientId);
-        Optional<String> verifiedEmail = GoogleTokenVerifier.validateToken(idTokenString);
+        Optional<String> verifiedEmail = GoogleTokenVerifier.validateToken(googleClientId, idTokenString);
         if (verifiedEmail.isPresent()) {
             String email = verifiedEmail.get();
             com.juick.model.User visitor = userService.getUserByEmail(email);