Skip to content

Enabling OIDC

When running in airplane mode, you are logged in automatically and skip any authentication steps. This saves developers time! Sometimes, though, you'll want to log in and log out as you implement features. This document describes how to enable Evidential's integration with Google OIDC Connect.

Note

Note: This process requires some familiarity with OAuth and Google Cloud. If you're unfamiliar, contact us and we can help you.

  1. Log in to the Google Cloud Console.

  2. Navigate to OAuth Overview.

  3. If you haven't set up OAuth before, you may be prompted to configure Google Auth Platform. If so, provide the following information:

    Setting Value
    App name My Evidential
    User Support Email your email address
    Audience Internal
    Contact Information your email address

  4. Navigate to Google Auth Platform > Clients.

  5. Click "Create Client"

  6. Configure the client as follows:

    Setting Value
    Application Type Web Application
    Name evidential development
    Authorized JavaScript Origins http://localhost:3000
    Authorized Redirect URIs (1 of 2) http://localhost:3000/ (note: trailing /)
    Authorized Redirect URIs (2 of 2) http://localhost:8000/v1/a/oidc/callback

  7. Click the "Create" button.

  8. You will be shown a "Client ID" and a "Client Secret" value. Keep these for later.

  9. In your backend repository, add or edit your .env file to include these lines:

    GOOGLE_OIDC_CLIENT_ID=[value from previous step]
GOOGLE_OIDC_CLIENT_SECRET=[value from previous step]

  10. In your frontend repository, add or edit your .env file to include this line::

    NEXT_PUBLIC_XNGIN_GOOGLE_CLIENT_ID=[value from previous step]

  11. Instead of using task start-airplane to start the services, use task start instead.

Note

Note: If your development environment requires you to use a different port number, you may also need to set the GOOGLE_OIDC_REDIRECT_URI variable on the backend.