:authority: supertokens.io :method: GET :path: /dev/oauth/redirect-to-provider?access_type=offline&include_granted_scopes=true&response_type=code&client_id=1060725074195-kmeum4crr01uirfl2op9kd5acmi9jutn.apps.googleusercontent.com&actual_redirect_uri=https%3A%2F%2Faccounts.google.com%2Fo%2Foauth2%2Fv2%2Fauth&scope=profile+email&redirect_uri=%2Fauth%2Fcallback%2Fgoogle :scheme: https accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9 accept-encoding: gzip, deflate, br accept-language: en-US,en;q=0.9 cache-control: no-cache pragma: no-cache referer: https:///

this seems like it would be related from the golang sdk code

if providerInfo.GetRedirectURI != nil && !isUsingDevelopmentClientId(providerInfo.GetClientId(userContext)) { // the backend wants to set the redirectURI - so we set that here. // we add the not development keys because the oauth provider will // redirect to supertokens.io's URL which will redirect the app // to the the user's website, which will handle the callback as usual. // If we add this, then instead, the supertokens' site will redirect // the user to this API layer, which is not needed. rU, err := providerInfo.GetRedirectURI(userContext) if err != nil { return tpmodels.AuthorisationUrlGETResponse{}, err } params["redirect_uri"] = rU }

if using the dev client id:

if isUsingDevelopmentClientId(providerInfo.GetClientId(userContext)) { params["actual_redirect_uri"] = providerInfo.AuthorisationRedirect.URL

tried a different google client id and secret. no wget this:

If you’re the app developer, make sure that these request details comply with Google policies. redirect_uri: /auth/callback/google

in Google Api Console... i have a callback url like: https://dev.xxxxxx.us/auth/callback/google

request url to google: https://accounts.google.com/o/oauth2/v2/auth?access_type=offline&include_granted_scopes=true&response_type=code&client_id=55555555-r4qbc1j3o9tee9e13lqt3ruq98agt9gn.apps.googleusercontent.com&scope=profile+email&redirect_uri=/auth/callback/google

Cause the redirect_uri query param is not correctly set in that request

It needs to be the full domain and path and not just /auth/callback/google

Have a look at this: https://supertokens.com/blog/adding-social-login-to-your-website-with-supertokens