Google OAuth

Redirect URI

Production callback pattern:

https://<your-domain>/api/auth/callback/google

Add the same origin under Authorized JavaScript origins (e.g. https://bitechain.org).

Local development

http://localhost:3000/api/auth/callback/google

Domain changes

If the public domain changes, update both Google Cloud Console (OAuth client) and deployment env (AUTH_URL, NEXT_PUBLIC_*) so they stay consistent.

Fidelity

When OAuth routes or providers change in src/auth/*, update this page and status/changelog.

Dependencies

Environment

• AUTH_SECRET — NextAuth / Auth.js secret.
• AUTH_GOOGLE_ID, AUTH_GOOGLE_SECRET — Google OAuth (server).
• NEXT_PUBLIC_AUTH_GOOGLE_ENABLED, NEXT_PUBLIC_AUTH_GOOGLE_ID, NEXT_PUBLIC_AUTH_GOOGLE_ONE_TAP_ENABLED — client flags / One Tap.
• AUTH_GITHUB_ID, AUTH_GITHUB_SECRET, NEXT_PUBLIC_AUTH_GITHUB_ENABLED — GitHub.
• NEXT_PUBLIC_AUTH_EMAIL_ENABLED — email/password provider.
• Deployment URL must match OAuth console redirect URIs (see body above; often AUTH_URL or host env in your platform).

Database (src/db/schema.ts)

• users — rows created/updated by src/auth/handler.ts sign-in flow.