Google OAuth Setup

Used worldwide. Most users already have a Google account, so this is the highest-converting social login outside Korea.

~10 minutes
Setup Guide

Setup steps

  1. 1

    Open Google Cloud Console

    Go to console.cloud.google.com and sign in with your Google account. If this is your first time, accept the terms.

  2. 2

    Create a project

    Click the project dropdown at the top, then "New Project". Name it something like "MyApp Auth". This name is only visible to you.

  3. 3

    Enable the OAuth consent screen

    In the left sidebar, go to "APIs & Services" β†’ "OAuth consent screen". Choose "External" (so anyone with a Google account can sign in), fill in your app name, support email, and developer contact. You can leave scopes empty for now.

  4. 4

    Create credentials

    Go to "APIs & Services" β†’ "Credentials" β†’ "Create Credentials" β†’ "OAuth client ID". Choose "Web application".

  5. 5

    Add the redirect URL

    Under "Authorized redirect URIs", paste your DontCode redirect URL (https://<your-deployed-domain>/api/auth/oauth/callback). Click Create.

  6. 6

    Copy the Client ID and Client Secret

    Google shows you a Client ID and a Client Secret. Copy both. DontCode needs the Client ID to start sign-in (it ends in .apps.googleusercontent.com) and the Client Secret to securely complete sign-in on the server. Treat the secret like a password.

  7. 7

    Paste them into DontCode

    Back in your DontCode project, go to Auth β†’ Social Login β†’ Google, paste both the Client ID and the Client Secret, click Save, then redeploy your app.

Google OAuth Setup: Troubleshooting

Also check the troubleshooting section on the main guide for issues that apply to all providers.

Google says "Access blocked: this app has not been verified"

During development, Google shows this warning to users outside your test list. You can either submit your app for verification (takes a few days) or add testers under "OAuth consent screen" β†’ "Test users" while you finalize the UX.

"redirect_uri_mismatch" after deploying to a new domain

You need to add the new domain to "Authorized redirect URIs" in the same OAuth client. Multiple URIs are allowed. Register every variant you might use (custom domain + dontcode.cafe subdomain).

CEO
Houk Elijah Storm
Registration
802-87-03840
Address
30, Nonhyeon-ro 10-gil, Gangnam-gu, Seoul, Republic of Korea (505-J39)
Tel
010-9766-7338
Email
storm@dontcode.co
    Dont Code