Google Login Configuration

This guide explains how to enable Google login in BBS-GO (including sign-in and account binding).

1. Prerequisites

• Your site is reachable via public domain (production)
• BBS-GO is installed and admin panel is accessible
• A Google Cloud project is available

2. Create OAuth Credentials in Google Cloud Console

1. Open Google Cloud Console: https://console.cloud.google.com
2. Go to APIs & Services -> Credentials
3. Click Create Credentials -> OAuth client ID
4. Select application type Web application
5. Configure origins and redirect URIs

2.1 Authorized JavaScript origins

Add your site origins (examples):

• https://bbs.example.com
• For local development: http://localhost:8082

2.2 Authorized redirect URIs

You must add both callback URIs (replace with your domain):

• https://bbs.example.com/user/signin/callback/google
• https://bbs.example.com/user/signin/callback/google_bind

Local examples:

• http://localhost:8082/user/signin/callback/google
• http://localhost:8082/user/signin/callback/google_bind

After creation, copy:

• Client ID
• Client Secret

3. Configure in BBS-GO Admin

Open admin panel: System Settings -> Login Settings -> Google Login

Fill and save:

• Enable: ON
• Client ID: from Google Cloud Console
• Client Secret: from Google Cloud Console

4. Important Setting (BaseURL)

BBS-GO builds Google callback URLs using server config baseURL (shown as BaseURL in some sample files).

Make sure bbs-go.yaml uses your full site URL, for example:

baseURL: https://bbs.example.com

If it remains /, callback URL may be non-absolute and Google login can fail.

5. Verification

1. Open sign-in page: /user/signin
2. Confirm Google login button is visible
3. Click it and verify redirect to Google authorization page
4. After consent, user should return and sign in successfully

Bind-flow verification:

1. Sign in and open account binding page
2. Start Google binding
3. After consent, account should show as bound

6. Common Issues

redirect_uri_mismatch

Cause: Callback URI in Google Console does not match actual callback URI.

Fix:

• Verify Authorized redirect URIs
• Verify baseURL in bbs-go.yaml
• Check scheme/port consistency (http vs https, custom port)

"Google login is not enabled"

Cause: Google login switch is disabled in admin settings.

Fix:

• Enable Google Login in System Settings -> Login Settings
• Ensure Client ID and Client Secret are saved

Works locally but fails in production

Usually domain/protocol/port mismatch.

Fix:

• Add production domain to Authorized JavaScript origins
• Add production callback URIs to Authorized redirect URIs
• Ensure baseURL matches production domain exactly