Google OAuth

Configure Google login in rs-auth.

Google OAuth is stable for the current public OAuth surface.

You must configure:

  • client ID
  • client secret
  • redirect URL

The Axum handler flow:

  1. redirects the user to Google
  2. stores OAuth state and PKCE verifier
  3. exchanges the callback code
  4. fetches Google user info
  5. creates or links the account
  6. issues a signed session cookie

This flow is covered by service tests and handler tests.

Stable scope

Stable support currently covers Google and GitHub login/callback flows, account creation, implicit linking, session creation, JSON mode, and redirect mode.