← Back to login
Google SSO

Google SSO setup guide

Use this page when you need to enable real Google sign-in for the dashboard. Add the Client ID to .env, define the allow-list, restart the app, and test login.

Client IDConfigured
Allowed emailsadmin@yourdomain.com
Allowed domainsNone
StatusReady
Steps
  1. Open Google Cloud Console and choose the project that contains the FlytrustContent OAuth client.
  2. Go to Google Auth Platform > Clients and create a Web application client if one does not already exist.
  3. Add Authorized JavaScript origins: `http://localhost:3000` for local, plus `https://flytrustcontent.io.vn` and `https://www.flytrustcontent.io.vn` for production.
  4. Do not use `http://flytrustcontent.io.vn` in production, because Google requires public origins to use `https://`.
  5. Authorized redirect URIs can stay empty for the current flow, because the dashboard uses Google Identity Services plus POST `/dashboard/auth/google` instead of a traditional redirect callback.
  6. Copy the Client ID into `GOOGLE_DASHBOARD_CLIENT_ID` in `.env`.
  7. Add allowed emails in `GOOGLE_DASHBOARD_ALLOWED_EMAILS` or allowed domains in `GOOGLE_DASHBOARD_ALLOWED_DOMAINS` for internal operators.
  8. Member accounts created through `/member/register` are also accepted by the dashboard once the workspace user exists in the database.
  9. Restart the app and open `/dashboard/login` to verify the real Google button.
GOOGLE_DASHBOARD_CLIENT_ID=your-client-id.apps.googleusercontent.com GOOGLE_DASHBOARD_ALLOWED_EMAILS=dangphi9333@gmail.com GOOGLE_DASHBOARD_ALLOWED_DOMAINS= GOOGLE_DASHBOARD_SESSION_SECRET=change-me
Endpoints