API authentication flow with Google

I have a Lumen API serving a VueJS SPA. The Vue app logs the user in with Google...where should I go from there? I know I need to send the user's Google ID token to Lumen, I need Lumen to verify that token is valid, then issue its own token that Vue can then add to the header of every request. I just don't really know HOW to do any of that...