The Little X Little JS SDK API is intentionally a near drop-in for Google Identity Services. In most cases you only change the script URL and the global namespace.
```diff - +
data-callback="handleCredentialResponse">
| Little X Little | |
|---|---|
google.accounts.id.initialize(...) | lxl.accounts.id.initialize(...) |
google.accounts.id.prompt(cb) | lxl.accounts.id.prompt(cb) |
google.accounts.id.renderButton(el, opts) | lxl.accounts.id.renderButton(el, opts) |
google.accounts.id.disableAutoSelect() | lxl.accounts.id.disableAutoSelect() |
google.accounts.id.cancel() | lxl.accounts.id.cancel() |
google.accounts.id.revoke(hint, done) | lxl.accounts.id.revoke(hint, done) |
google.accounts.oauth2.initCodeClient(...) | lxl.accounts.oauth2.initCodeClient(...) |
google.accounts.oauth2.initTokenClient(...) | lxl.accounts.oauth2.initTokenClient(...) |
php $client = new Google_Client(['client_id' => GOOGLE_CLIENT_ID]); $payload = $client->verifyIdToken($_POST['credential']);
php $client = new LXL\Id\Client(['client_id' => LXL_CLIENT_ID]); $payload = $client->verifyOneTap($_POST['credential']);
The returned $payload array shape is the same standard OIDC claim set (sub, email, email_verified, name, picture, iss, aud, iat, exp, nonce).
lxl.app (NGO code) and lxl.access (permission strings) instead.https://id.littlexlittle.org — verify against this, not accounts.google.com.https://id.littlexlittle.org/.well-known/jwks.json. Most libraries accept the discovery URL and find JWKS automatically.idAssertionEndpoint quirks — we implement it per spec.If you want to support both Google and LXL during a transition:
```html
```
The two SDKs do not collide — they live under separate global namespaces and use separate iframe origins.