🔐 Google OAuth Setup Guide (Laravel / Socialite)

  • May 5, 2026
  • -

🎯 Goal

Make Google login work using only .env:

GOOGLE_CLIENT_ID=
GOOGLE_CLIENT_SECRET=
GOOGLE_REDIRECT_URI=

🚀 1. Create OAuth Credentials

Go to Google Cloud Console

Steps:

  1. Create/select a project
  2. Go to: APIs & Services → OAuth consent screen

⚙️ Configure Consent Screen

  • Choose: External
  • Fill required:
    • App name
    • Support email
    • Developer email

Add scopes:

  • email
  • profile

➕ Add Test Users (IMPORTANT)

Scroll down → Test Users

Click:

+ ADD USERS

Add:

[email protected]
[email protected]

👉 Only these users can log in while testing

🔑 2. Create OAuth Client ID

Go to:
👉 APIs & Services → Credentials

Click:

+ CREATE CREDENTIALS → OAuth Client ID

Select:

  • Web Application

Add Redirect URI:

http://sprintly.test/auth/google/callback

⚠️ Must match Laravel exactly

📦 3. Put Credentials in .env

GOOGLE_CLIENT_ID=xxxx.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=xxxx
GOOGLE_REDIRECT_URI=http://yoursite.com/auth/google/callback

🔄 4. Apply Changes

php artisan config:clear
php artisan cache:clear

🧪 Testing vs Production

🧪 Testing Mode (Default)

  • Only Test Users can log in
  • No verification needed

👉 Use for:

  • development
  • demo
  • client testing

🌍 Publish App (Production)

  • Anyone can log in
  • May require Google verification

👉 Use when:

  • app is fully live
  • real users need access

🧠 Decision Rule

  • Few users → Stay in Testing
  • Public system → Publish later

⚠️ Common Errors

❌ redirect_uri_mismatch

→ .env and Google Console don’t match exactly

❌ invalid_client

→ wrong client ID / secret

❌ This app isn’t verified

→ user not in Test Users OR app not published

⚡ Local vs Production

Local:

GOOGLE_REDIRECT_URI=http://sprintly.test/auth/google/callback

Production:

GOOGLE_REDIRECT_URI=https://yourdomain.com/auth/google/callback

👉 Add BOTH in Google Console

🧠 Final Mental Model

  • Consent Screen → user-facing setup
  • Client ID → app credentials
  • Test Users → who can log in (testing mode)
  • Publish App → open to public

✅ TL;DR

  • Setup consent screen
  • Add test users
  • Create OAuth Client ID
  • Paste in .env
  • Match redirect exactly
  • General
Previous Post