Replace People API user lookup with OIDC userinfo endpoint

Joe says:

OK I'm going to count this as a win for Claude. It has always bothered me that
we added a whole OAuth scope just so we could say “programming as joe.politz”
in the bottom left, when *we just logged the user in with that email address*.
I just never found the API to do it.

Turns out this does come for free with OpenID Connect. This change removes an
entire scope *and* makes it so we can disable an API in the cloud console.

Claude says:

The four call sites that fetched the user's email via People API
(people/v1, api.people.get) only ever used the email address — the
display name was always overwritten. Switch to the OIDC userinfo
endpoint, which returns the email with just the `email` scope.

- Drop `profile` from DEFAULT_OAUTH_SCOPES and FULL_OAUTH_SCOPES
- Replace gwrap.load({name: 'people'}) + api.people.get with a
  fetch to https://openidconnect.googleapis.com/v1/userinfo
- Update StudentDashboard to read `.email` instead of
  `.emailAddresses[0].value`

Consent screen no longer says "Email and profile photo", and the
People API no longer needs to be enabled in the Cloud project.

Author: jpolitz

src/google-auth.js

@@ -4,14 +4,12 @@ var OAuth2 = gapi.auth.OAuth2;
 
 var DEFAULT_OAUTH_SCOPES = [
                     "email",
-                    "profile",
                     "https://www.googleapis.com/auth/drive.file",
                     "https://www.googleapis.com/auth/drive.install",
                   ];
 
 var FULL_OAUTH_SCOPES = [
                     "email",
-                    "profile",
                     "https://www.googleapis.com/auth/spreadsheets",
                     "https://www.googleapis.com/auth/drive.file",
                     "https://www.googleapis.com/auth/drive",

src/web/js/beforeBlocks.js

@@ -305,16 +305,13 @@ $(function() {
   };
 
   function setUsername(target) {
-    return gwrap.load({name: 'people',
-      version: 'v1',
-    }).then((api) => {
-      api.people.get({ resourceName: "people/me", personFields: "names,emailAddresses" }).then(function(user) {
-        var name = user.names && user.names[0] ? user.names[0].displayName : undefined;
-        if (user.emailAddresses && user.emailAddresses[0] && user.emailAddresses[0].value) {
-          name = user.emailAddresses[0].value;
-        }
-        target.text(name);
-      });
+    var token = window.gapi.auth.getToken().access_token;
+    return fetch('https://openidconnect.googleapis.com/v1/userinfo', {
+      headers: { Authorization: 'Bearer ' + token }
+    }).then(function(resp) {
+      return resp.json();
+    }).then(function(info) {
+      target.text(info.email);
     });
   }
 

src/web/js/beforePyret.js

@@ -457,16 +457,13 @@ $(function() {
   };
 
   function setUsername(target) {
-    return gwrap.load({name: 'people',
-      version: 'v1',
-    }).then((api) => {
-      api.people.get({ resourceName: "people/me", personFields: "names,emailAddresses" }).then(function(user) {
-        var name = user.names && user.names[0] ? user.names[0].displayName : undefined;
-        if (user.emailAddresses && user.emailAddresses[0] && user.emailAddresses[0].value) {
-          name = user.emailAddresses[0].value;
-        }
-        target.text(name);
-      });
+    var token = window.gapi.auth.getToken().access_token;
+    return fetch('https://openidconnect.googleapis.com/v1/userinfo', {
+      headers: { Authorization: 'Bearer ' + token }
+    }).then(function(resp) {
+      return resp.json();
+    }).then(function(info) {
+      target.text(info.email);
     });
   }
 

src/web/js/dashboard/GoogleAPI.js

@@ -151,12 +151,10 @@ class GoogleAPI {
   }
 
   getUsername = () => {
-    return gwrap.load({name: 'people',
-      version: 'v1',
-    }).then((api) => {
-      console.log("Api: ", api);
-      return api.people.get({ resourceName: "people/me", personFields: "names,emailAddresses" });
-    });
+    var token = window.gapi.auth.getToken().access_token;
+    return fetch('https://openidconnect.googleapis.com/v1/userinfo', {
+      headers: { Authorization: 'Bearer ' + token }
+    }).then((resp) => resp.json());
   }
 }
 

src/web/js/dashboard/StudentDashboard.js

@@ -31,7 +31,7 @@ class StudentDashboard extends Component {
         this.setState({signedIn: SIGNED_IN});
         this.updateRecentFiles();
         this.api.getUsername().then((userInfo) => {
-          this.setState({ userName: userInfo.emailAddresses[0].value });
+          this.setState({ userName: userInfo.email });
         });
       }
       else {