quick question, why does supertokens's development keys from google clientId and clientSecret works ...
m
quick question, why does supertokens's development keys from google clientId and clientSecret works on all domain? I copied this from (https://supertokens.com/docs/thirdpartypasswordless/pre-built-ui/setup/backend)
Copy code
Google({
                    clientId: "1060725074195-kmeum4crr01uirfl2op9kd5acmi9jutn.apps.googleusercontent.com",
                    clientSecret: "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"
                }),
It seems that we dont actually have the access to account. But for some reason, the redirect_uris works on all domains. how is that possible? but, when I created my own google clientId and clientSecret. I need to explicitly put my registered domain there
r
hey @muhajirdev
the reason it works for all domains is cause when using the dev credentials, we proxy the requests via our website supertokens.com (so we have set supertokens.com as a redirect domain on our dev credentials). But when you use non dev credentials, it will not proxy via our website