---
title: "Google Login"
method: POST
path: "/v1/auth/google"
tags: ["Authentication", "Authentication"]
---

# Google Login

`POST /v1/auth/google`

## Request

- Base URL: `https://api.call2me.app`
- URL: `https://api.call2me.app/v1/auth/google`
- Auth: HTTP bearer

Google ID token ile giriş/kayıt. Mevcut JWT+refresh döner.

## Request body

- GoogleLoginRequest
  - `credential` string, required
  - `attribution` Attribution: Where this user came from, captured in the browser on first touch. GA4 loses the source when a visitor crosses from call2me.app to dash.call2me.app, so every conversion landed in "Unassigned" and we could not say how our first paying customer found us (14 Aug 2026). This travels with the signup request instead, so attribution lives in our own DB — independent of analytics and ad blockers. Every field is optional: a direct visit legitimately has no referrer. Lengths are capped because these strings come from the client.
    - `referrer` string, nullable
    - `landing` string, nullable
    - `utm_source` string, nullable
    - `utm_medium` string, nullable
    - `utm_campaign` string, nullable
    - `gclid` string, nullable

## Response `200`

Successful Response

- AuthResponse: Authentication response with tokens.
  - `access_token` string, required
  - `refresh_token` string, required
  - `token_type` string
  - `expires_in` integer, required
  - `user` object, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/call2me/apis/call2me-api.md) · [All operations](https://skmtc.dev/call2me/apis/call2me-api/llms.txt) · [OpenAPI document](https://skmtc.dev/call2me/apis/call2me-api/revisions/3951f9b7e47d?raw)