Purpose::
Visitors sign in with Google on the project, live and local.
Rules::
- One OAuth client per project; rerunning never creates a duplicate
- Secrets live in your env file and host settings; never in git or replies
- One "Continue with Google" button for both sign in and sign up
Inventory::
- Google Cloud project with a published consent screen
- Your auth library (for example NextAuth) and host env settings
Steps::
- 1Create a Web OAuth client named after the project
- 2Add origins and redirect URIs: localhost, the host URL and the domain (+ www)
- 3Save the client id and secret to your env file and the host; redeploy
- 4Check /api/auth/providers lists google and the button opens Google, not redirect_uri_mismatch
- 5Reply in one line: client name, login works
Metrics::
- Login and signup reach the app
- No secret in the repo