After a gruelling 2 days of research, I finally found something that makes sense. Google has so much documentation around their authentication, I couldn't figure out which documentation applied to my use case. But this makes complete sense, thank you!