Editorial
Google doesn't use the latest OpenID Connect User Info Schema.
The client MUST know about what client aurthentication mechanisms it can use.
Paypal expects Client Secret Post.