# Google Login

## Setup

1. Google Cloud Console → OAuth 2.0 Client (Web application)
2. Authorized redirect URIs:
   - `https://secure-file-transfer.io/connect/google/check`
   - `http://localhost:8000/connect/google/check`
3. Set in `ftc/.env.local` (never commit secrets):

```env
GOOGLE_CLIENT_ID=...
GOOGLE_CLIENT_SECRET=...
```

4. Run migration: `php bin/console doctrine:migrations:migrate`

## Behaviour

- Login page: “Continue with Google”
- Existing account with same email → linked (`google_id`) and logged in
- New Google user → Free license account (same as normal registration), email verified
- Email 2FA (Scheb) still applies after Google login when enabled on the user

## Routes

- Start: `/connect/google` (`connect_google_start`)
- Callback: `/connect/google/check` (`connect_google_check`)