Overview
Set up Google OAuth login flow and tested session management.
What I Built
- Google OAuth provider setup
- Session persistence with JWT
- Protected route middleware
What Broke
- Redirect URI mismatch
- Token refresh edge cases
What I Learned
- OAuth 2.0 authorization code flow
- Session vs JWT trade-offs
- Google Cloud Console setup
Next Steps
- Add refresh token rotation
- Support multiple providers
