Google OAuth

Google Sign-In lets users authenticate with their Google account. It’s widely trusted and many users prefer it for its convenience.

App Store Requirement: If you add Google Sign-In, you must also add Apple Sign In. Your app will be rejected without it. See Apple Sign In for setup and important App Store guidelines.

Overview

Setting up Google OAuth requires configuration in three places:

Google Cloud Console — Create OAuth credentials
Supabase Dashboard — Enable Google as an auth provider
Your App — Configure the redirect URI and use the auth function

Time required: ~20 minutes

Part 1: Google Cloud Console

Step 1: Create a Project (if needed)

Open Google Cloud Console

Go to console.cloud.google.comSign in with your Google account

Create or select a project

Click the project dropdown at the topClick New Project or select an existing oneGive it a name (e.g., “Your App Name”)

Before creating credentials, you need to configure what users see when they sign in.

Open OAuth consent screen

Go to APIs & Services → OAuth consent screenDirect link

Select user type

Choose External (unless you’re building for a Google Workspace organization)Click Create

Fill in app information

Field	Value
App name	Your app’s name
User support email	Your email
App logo	Optional, but recommended
Developer contact email	Your email

Click Save and Continue

Scopes

Click Add or Remove ScopesSelect:

.../auth/userinfo.email
.../auth/userinfo.profile
openid

Click Update, then Save and Continue

Test users (optional)

While in testing mode, add your email as a test userClick Save and Continue

Summary

Review and click Back to Dashboard

Step 3: Create OAuth Credentials

Open Credentials

Go to APIs & Services → CredentialsDirect link

Create OAuth client ID

Click + Create Credentials → OAuth client ID

Configure for iOS

Field	Value
Application type	iOS
Name	Your App (iOS)
Bundle ID	Your app’s bundle ID (e.g., `com.yourcompany.yourapp`)

Click Create

Save your Client ID

Copy the Client ID — you’ll need this for SupabaseIt looks like: 123456789-abc123def456.apps.googleusercontent.com

Create Web client (for Supabase)

Click + Create Credentials → OAuth client ID again

Field	Value
Application type	Web application
Name	Your App (Web)
Authorized redirect URIs	`https://YOUR_PROJECT_REF.supabase.co/auth/v1/callback`

Click CreateCopy both the Client ID and Client Secret

Keep your Client Secret secure. Never commit it to version control or expose it in client-side code.

Part 2: Supabase Dashboard

Enable Google Provider

Open Auth settings

Go to your Supabase project dashboardNavigate to Authentication → Providers

Enable Google

Find Google in the list and click to expandToggle Enable Sign in with Google

Enter credentials

Use the Web application credentials (not iOS):

Field	Value
Client ID	Your Web OAuth Client ID
Client Secret	Your Web OAuth Client Secret

Save

Click Save

Part 3: App Configuration

Step 1: Update App Config

Update config/app.config.ts:

auth: {
  mode: 'anonymous', // or 'required'
  providers: {
    apple: true,  // Required if you have Google
    google: true, // Enable Google Sign In
    email: false,
  },
}

Step 2: Configure Redirect URI

In lib/auth.ts, update the scheme in signInWithGoogle() to match your app:

const redirectUri = makeRedirectUri({
  scheme: 'your-app-scheme', // Must match "scheme" in app.json
});

Your scheme is defined in app.json:

{
  "expo": {
    "scheme": "your-app-scheme"
  }
}

Step 3: Use in Your App

import { signInWithGoogle } from '@/lib/auth';

try {
  const { user, session } = await signInWithGoogle();
  console.log('Signed in:', user.id);
} catch (error) {
  console.error('Google sign in failed:', error);
}

Or use the pre-built component:

import { SocialAuthButtons } from '@/components/auth';

<SocialAuthButtons
  showApple={true}
  showGoogle={true}
  onSuccess={() => router.replace('/(main)')}
  onError={(err) => Alert.alert('Error', err.message)}
/>

Testing

Development Build Required

Google OAuth requires a development build — it won’t work in Expo Go.

eas build --platform ios --profile development

Testing Checklist

Build and install the development build
Tap “Sign in with Google”
Browser opens with Google’s sign-in page
Sign in with a test user account
You’re redirected back to the app
User is authenticated

Troubleshooting

'redirect_uri_mismatch' error

The redirect URI in Google Console must exactly match what your app sends.

Check the redirect URI in Credentials → Web client → Authorized redirect URIs
It should be: https://YOUR_PROJECT_REF.supabase.co/auth/v1/callback
No trailing slash, exact case match

'access_denied' error

If using External user type, ensure your Google account is added as a test user
Or publish your OAuth consent screen to production

Browser opens but nothing happens

Check your app scheme matches in app.json and the auth code
Ensure you’re using a development build, not Expo Go

'invalid_client' error

Verify you’re using the Web client credentials in Supabase (not iOS)
Double-check the Client ID and Client Secret are correct

Publishing to Production

Before launching your app:

Publish OAuth consent screen

Go to OAuth consent screen in Google Cloud ConsoleClick Publish AppThis removes the “test user” restriction

Verify your app (optional)

If you’re requesting sensitive scopes, Google may require verificationFor basic profile/email scopes, this is usually not required

Get Started

Core Modules

Screens

Customization

Deployment

App Store

Google OAuth

Google OAuth

Overview

Part 1: Google Cloud Console

Step 1: Create a Project (if needed)

Step 3: Create OAuth Credentials

Part 2: Supabase Dashboard

Enable Google Provider

Part 3: App Configuration

Step 1: Update App Config

Step 2: Configure Redirect URI

Step 3: Use in Your App

Testing

Development Build Required

Testing Checklist

Troubleshooting

Publishing to Production

Next Steps

Apple Sign In

Email + Password

​Google OAuth

​Overview

​Part 1: Google Cloud Console

​Step 1: Create a Project (if needed)

​Step 2: Configure OAuth Consent Screen

​Step 3: Create OAuth Credentials

​Part 2: Supabase Dashboard

​Enable Google Provider

​Part 3: App Configuration

​Step 1: Update App Config

​Step 2: Configure Redirect URI

​Step 3: Use in Your App

​Testing

​Development Build Required

​Testing Checklist

​Troubleshooting

​Publishing to Production

​Next Steps

Apple Sign In

Email + Password

Google OAuth

Overview

Part 1: Google Cloud Console

Step 1: Create a Project (if needed)

Step 2: Configure OAuth Consent Screen

Step 3: Create OAuth Credentials

Part 2: Supabase Dashboard

Enable Google Provider

Part 3: App Configuration

Step 1: Update App Config

Step 2: Configure Redirect URI

Step 3: Use in Your App

Testing

Development Build Required

Testing Checklist

Troubleshooting

Publishing to Production

Next Steps