Five minutes in the Google Cloud Console. The values below are already filled in for this deployment — copy them across rather than typing them, since a single character off produces redirect_uri_mismatch and nothing more helpful. The same walkthrough in prose is at docs/setup/google.
1
Create an OAuth client
In the Google Cloud Console, go to APIs & Services → Credentials → Create Credentials → OAuth client ID, and pick Web application as the type.
This is the Convex deployment, not your site. Google doesn’t verify domains for the callback, so it can go straight there — Apple is the one that can’t.
3
Set the credentials
Both are required for the provider to register at all — convex/auth.ts checks the pair, so setting one leaves Google switched off.
Client ID
bunx convex env set GOOGLE_CLIENT_ID "<client id>"
Client secret
bunx convex env set GOOGLE_CLIENT_SECRET "<client secret>"
4
Check Google is live
Once this goes green the Google button on the sign-in card loses its “needs setup” badge.Environment variables take a moment to propagate after convex env set. This asks the deployment directly.