Sign in with Google

Ready when you enable it

Google login stays off until you configure it, so a fresh starter still runs without Google credentials. Environment validation checks that the client ID and secret are present when enabled, and deployment configuration includes the new settings.

• Configure a Web application client in Google Auth Platform.
• Use env.zerotoshipped.com to generate the settings and copy your exact callback URL.
• Follow docs/google-sign-in.md in the starter for local development and production setup.

No extra permissions at signup

Basic Google sign-in does not require sensitive-scope verification. Publish your app for public use and configure its homepage and privacy policy. Custom branding can require a separate review. If you later add Gmail or Calendar features, request those permissions only when a user connects that feature.