Set up Google sign-in

Five minutes in the Google Cloud Console. The values below are already filled in for this deployment — copy them across rather than typing them, since a single character off produces redirect_uri_mismatch and nothing more helpful. The same walkthrough in prose is at docs/setup/google.

1. 1

   Create an OAuth client

   In the Google Cloud Console, go to APIs & Services → Credentials → Create Credentials → OAuth client ID, and pick Web application as the type.

2. 2

   Add the redirect URI

   Authorized redirect URI

   https://giddy-dinosaur-765.convex.site/api/auth/callback/google

   This is the Convex deployment, not your site. Google doesn’t verify domains for the callback, so it can go straight there — Apple is the one that can’t.
3. 3

   Set the credentials

   Both are required for the provider to register at all — convex/auth.ts checks the pair, so setting one leaves Google switched off.

   Client ID

   bunx convex env set GOOGLE_CLIENT_ID "<client id>"

   Client secret

   bunx convex env set GOOGLE_CLIENT_SECRET "<client secret>"
4. 4

   Check Google is live

   Once this goes green the Google button on the sign-in card loses its “needs setup” badge.

   Environment variables take a moment to propagate after convex env set. This asks the deployment directly.

   Check now