Google

This guide walks you through configuring Google as a social login provider for your application.

Prerequisites

A Google Cloud project
Your Google OAuth Client ID and Client Secret

Configure Google OAuth

Create OAuth credentials on Google Cloud

Go to the Google Cloud Console
Select your project (or create a new one)
Navigate to APIs & Services > Credentials
Click Create Credentials > OAuth client ID
Select Web application as the application type
Give it a name (e.g. “Prelude Auth”)
Copy the Client ID and Client Secret — you will need them in the next step

Set the authorized redirect URI

Still on the same OAuth client page in the Google Cloud Console:

Under Authorized redirect URIs, click Add URI
Enter the following URI:

https://${YOUR_CUSTOM_DOMAIN}/v1/session/login/oauth/google/callback

Replace ${YOUR_CUSTOM_DOMAIN} with your custom domain (e.g. session.yourapp.com).

Click Save

The redirect URI must match exactly. Make sure there is no trailing slash and that you are using https.

Create the Google OAuth configuration

curl -X POST https://api.prelude.dev/v2/session/apps/${APP_ID}/config/login/oauth/google \
  -H "Authorization: Bearer ${MANAGEMENT_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "your-google-client-id",
    "client_secret": "your-google-client-secret",
    "enabled": true,
    "options": {
      "use_email_as_identifier": true,
      "allow_email_account_merge": true
    }
  }'

Field	Description
`client_id`	Your Google OAuth client ID.
`client_secret`	Your Google OAuth client secret.
`enabled`	Set to `true` to enable Google login.
`options.use_email_as_identifier`	When `true`, the user’s Google email is stored as an email identifier.
`options.allow_email_account_merge`	When `true`, if a user with the same email already exists, the Google account is linked to the existing user.

Update the configuration

To update an existing Google OAuth configuration:

curl -X PUT https://api.prelude.dev/v2/session/apps/${APP_ID}/config/login/oauth/google \
  -H "Authorization: Bearer ${MANAGEMENT_API_KEY}" \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "your-new-google-client-id",
    "client_secret": "your-new-google-client-secret",
    "enabled": true,
    "options": {
      "use_email_as_identifier": true,
      "allow_email_account_merge": true
    }
  }'

Delete the configuration

To remove Google OAuth from your application:

curl -X DELETE https://api.prelude.dev/v2/session/apps/${APP_ID}/config/login/oauth/google \
  -H "Authorization: Bearer ${MANAGEMENT_API_KEY}"

What’s next?

Now that Google OAuth is configured on your backend, integrate the frontend using the Web Integration guide.

Documentation

API Reference

Prerequisites

Configure Google OAuth

Update the configuration

Delete the configuration

What’s next?

​Prerequisites

​Configure Google OAuth

​Update the configuration

​Delete the configuration

​What’s next?

Prerequisites

Configure Google OAuth

Update the configuration

Delete the configuration

What’s next?