add steps for creating Client ID for Google Auth

Eric Knibbe
2026-07-08 13:11:26 -04:00
parent b123a9a4a5
commit 6195b98472
+6 -1
@@ -208,7 +208,12 @@ Google [Documentation](https://developers.google.com/identity/openid-connect/ope
\
By default without extra [configuration](https://developers.google.com/identity/protocols/oauth2/web-server#creatingclient) you won´t have a `refresh_token` and session will be limited to 1h.
Configure your server with :
In _Google Auth Platform > Clients_, create a new Client ID with:
- Authorized JavaScript origins: `https://vaultwarden.example.tld`
- Authorized redirect URIs: `https://vaultwarden.example.tld/identity/connect/oidc-signin`
Then configure your server with:
- `SSO_AUTHORITY=https://accounts.google.com`
- `SSO_AUTHORIZE_EXTRA_PARAMS="access_type=offline&prompt=consent"`