Skip to main content
Google OAuth setup requires the gcloud CLI and involves creating an OAuth consent screen and client credentials through the Google Cloud Console.

​
Prerequisites

The gcloud CLI must be installed and authenticated before setting up Google OAuth.
Install the gcloud CLI: 
# Visit https://cloud.google.com/sdk/docs/install for installation instructions
# Then authenticate:
gcloud auth login
OAuth Init will automatically check for gcloud CLI installation and authentication status before proceeding.

​
Setup Process

1

Select Google Cloud Project

OAuth Init fetches your Google Cloud projects using the gcloud CLI and displays them for selection.The currently active project (from gcloud config get-value project) will be marked as “(Default)”.If no projects are found, create one at Google Cloud Console.
2

Configure OAuth Consent Screen

OAuth Init opens the OAuth consent screen configuration page:
https://console.cloud.google.com/apis/credentials/consent?project=YOUR_PROJECT_ID
Google requires manual setup for personal projects.
Complete these steps in the Google Cloud Console:
  1. Choose External as the user type
  2. Fill in the App Name and User support email
  3. Click Save and Continue through all remaining screens
Press Enter in the CLI once you’ve saved the consent screen (or type ‘skip’ if configured previously).
3

Create OAuth Client ID

OAuth Init opens the OAuth client creation page:
https://console.cloud.google.com/apis/credentials/oauthclient?project=YOUR_PROJECT_ID
Complete these steps:
  1. Select Web Application as the application type
  2. Add your Redirect URIs (your application’s callback URLs)
  3. Click Create
After creation, copy the Client ID and Client Secret from the modal that appears.
4

Enter Credentials

Paste your credentials when prompted:Client ID:
12345-abcde.apps.googleusercontent.com
Client Secret:
GOCSPX-xxxxxxxxxxxxxxxxxxxxxxxxx
The Client ID must contain .apps.googleusercontent.com to be valid.
5

Save Credentials

Choose where to save your credentials:
  • .env - Save to .env file in your project root
  • .env.local - Save to .env.local file (ideal for Next.js projects)
  • .json - Save to google-credentials.json file
  • print to the console - Display credentials in terminal without saving
See Save Options for detailed information about each format.

​
Validation Rules

OAuth Init validates the Google Client ID format: 
validate: (value) =>
  value?.includes(".apps.googleusercontent.com")
    ? undefined
    : "Invalid format"
The Client ID must contain .apps.googleusercontent.com to pass validation.

​
Automated Checks

OAuth Init performs the following checks:
  1. gcloud CLI Installation - Verifies gcloud version command succeeds
  2. Authentication Status - Checks for active authenticated accounts using: 
    gcloud auth list --format=value(account) --filter=status:ACTIVE
  3. Project Access - Fetches available projects to ensure proper access
If any check fails, the setup process will exit with an error message and instructions.

​
CLI Options

When running OAuth Init, you can use various flags to customize behavior: 
# Standard interactive setup
oauth-init

# Skip browser opening (get URLs in console)
oauth-init --no-open

# Quiet mode (minimal output)
oauth-init --quiet

# Combine flags
oauth-init --quiet --no-open
See CLI Options for all available flags.

Build docs developers (and LLMs) love

Get started for freeTalk to us