---
title: "Start the \"Sign in with Google\" flow (DVT-39)."
method: GET
path: "/auth/google/login"
tags: ["auth"]
---

# Start the "Sign in with Google" flow (DVT-39).

`GET /auth/google/login`

## Request

- Base URL: `http://localhost:8080`
- URL: `http://localhost:8080/auth/google/login`
- Auth: none required

Optional Google OAuth/OIDC provider. Mounted only when the server is configured with
`GOOGLE_OAUTH_CLIENT_ID` / `GOOGLE_OAUTH_CLIENT_SECRET` (otherwise 404). Sets a short-lived
CSRF state cookie and redirects (302) to the Google consent screen. On success Google
redirects back to `/auth/google/callback`. Browser-only — not for programmatic clients.

## Other responses

- `302`: Redirect to the Google authorization URL.
- `404`: Google sign-in is not configured on this instance.
- `429`: Per-actor API rate limit exceeded (SEC-2). All authenticated `/v1` routes apply a per-actor fixed-window default tier; selected compute-heavy routes (connection tests, column describe, data export) apply an additional tighter tier. Auth endpoints apply a per-IP tier. Problem type: `https://docs.dvt.dev/errors/rate-limited`. Wait for the `Retry-After` response header value (seconds) before retrying.

---

[API](https://skmtc.dev/dvt/apis/dvt-rest-api.md) · [All operations](https://skmtc.dev/dvt/apis/dvt-rest-api/llms.txt) · [OpenAPI document](https://skmtc.dev/dvt/apis/dvt-rest-api/revisions/00016f504165?raw)