Docs

Adding social sign-in

Lets people sign in with accounts such as Google or Kakao. Sets the callback address and the return address together.

Please add social sign-in to this app.

1. Use list_auth_providers to see the available providers and the callback_url. 2. Create an app in the provider's console and register that callback_url as its redirect address. A person has to do this step. Copy the address exactly and give it to the user. 3. Save the client ID and secret they bring back with set_auth_provider. Saving turns it on right away. 4. Add the address to send people back to after sign-in with add_redirect_url. 5. In the frontend, send people to GET /auth/v1/authorize?provider=<name>&redirect_to=<the address from step 4>. 6. The token arrives after the # in the address they return to. Not in the query string. 7. Check with list_auth_providers that it shows enabled: true.

If either step 2 or step 4 is missing, this is what you see. A wrong callback address is stopped on the provider's screen; a missing return address means sign-in works but goes nowhere. In neither case does the error message say why, so get both right before you start.

The secret is stored sealed and cannot be read back. Only its last four characters can be checked, as secret_hint.