Google One Tap lets users authenticate with a single prompt instead of a full OAuth consent screen.
When a user signs in via One Tap, you receive a JWT but no access_token or refresh_token, so you cannot call Google APIs for that user.
Prerequisites
- Configure Google as an OAuth provider in Stytch.
- Add your application’s domain as an Authorized JavaScript Origin in the Google Cloud Console.
If you haven’t set up the Google provider yet, start with the Google provider setup guide:
Google OAuth setup
Enable One Tap in the Dashboard
In the Stytch Dashboard, navigate to OAuth > Providers > Google and enable One Tap.
Update your SDK config
Enable One Tap in your OAuth providers config. Example (React/Next.js):
import { Products } from "@stytch/react";
const config = {
products: [Products.oauth],
oauthOptions: {
providers: [{ type: "google", one_tap: true }],
},
};
Next steps
