Google Photos Cloud Import & Ingestion

Cloud-to-Cloud Asset Transfer

For photographers who back up field shoots or client galleries to Google Photos, downloading gigabytes of images locally just to re-upload them into BestShots creates unnecessary network overhead.

The BestShots Google Photos integration (WPS-481) orchestrates direct cloud-to-cloud transfers between Google storage infrastructure and Microsoft Azure.

---

Technical Flow & Token Security

1. OAuth 2.0 Authorization: Photographers connect their Google account via the standard OAuth flow. Access and refresh tokens are stored in Neon PostgreSQL with AES-256-GCM encryption.
2. Google Photos Picker: Users launch the native Google Photos Picker dialog to select specific albums or date ranges.
3. Background Ingestion Job: An ImportJob is created with status PENDING. An Azure background worker streams media bytes directly from Google CDN endpoints into Azure Blob Storage.
4. Deduplication Safeguards: Assets are tracked using Google unique item identifiers with database constraints (@@unique([projectId, googlePhotosId])) to prevent duplicate credit usage or duplicate gallery cards.

---

Automatic Refresh Token Rotation

When long-running imports exceed standard 60-minute OAuth token lifespans, the background import processor automatically contacts Google identity services to rotate the authorization token without interrupting active download pipelines.