Account

Sign in

OAuth is not configured for this deployment yet — see the checklist below.

Google OAuth env vars are present but AUTH_GOOGLE_ID is not a valid Google Client ID.

Google Cloud Console -> APIs & Services -> Credentials -> OAuth 2.0 Client IDs -> Web application:
• Copy Client ID (ends with .apps.googleusercontent.com) into Vercel AUTH_GOOGLE_ID
• Copy Client secret into Vercel AUTH_GOOGLE_SECRET (never swap them)

Authorized redirect URI (exact):
https://catiusai.com/api/auth/callback/google

After updating Vercel -> Save -> Redeploy Production. Check /api/health/oauth for googleClientIdFormatValid: true.

Owner passwordless sign-in is turned off in production. Configure OAuth keys, or set ALLOW_OWNER_PASSWORDLESS=true only as a controlled break-glass measure.