title: Google open id connect
body: <p>I'm trying to secure my endpoint using open Id connect. Currently there is only a mobile app client. With Google as the Identity provider, I have Id_token and access_token. </p>
  
  <p>My question is can I use this access token returned as a part of authentication to authorize user to access my endpoint? 
  If yes, Is there a way to validate the access token within my server?</p>
  
  <p>Or Should I create an access token for the user and store the same, so that when the user requests, I will check in the DB/Redis ?</p>