Authentication
Querylab.io connects to BigQuery using your Google account.
OAuth Scopes
Required
| Scope | Purpose |
|---|---|
bigquery | Query execution and metadata access |
Optional (granted when you use the feature)
| Scope | Feature |
|---|---|
cloudplatformprojects.readonly | Project discovery (read-only) |
cloud-platform | Scheduled queries (full access for Data Transfer API) |
drive.file | Export results to Google Sheets |
Auth Methods
Google OAuth (Web & Desktop)
Sign in with your Google account. Additional scopes are requested only when needed.
Application Default Credentials (Desktop only)
Use your local gcloud CLI credentials:
gcloud auth application-default login
Select Use ADC in Querylab.io. Tokens stay on your machine.
Token Storage
| Platform | Storage |
|---|---|
| Web | Securely stored and encrypted on Querylab.io server |
| Desktop | OS Keychain (tokens never leave your device) |