Auth Routes

Auth Routes

The OAuth flow requires specific routes: one to start the login process, one to handle the callback from Google, and one to log out. Let us create them.

The Auth Router

// routes/auth-routes.js
const router = require('express').Router();

// Auth login
router.get('/login', function(req, res) {
    res.send('Login with Google');
});

// Auth logout
router.get('/logout', function(req, res) {
    // TODO: handle logout
    res.send('Logging out');
});

// Auth with Google
router.get('/google', function(req, res) {
    // TODO: passport will handle this
    res.send('Authenticating with Google...');
});

// Callback route for Google to redirect to
router.get('/google/redirect', function(req, res) {
    // TODO: handle the callback
    res.send('You reached the callback URI');
});

module.exports = router;

Registering Routes in app.js

// app.js
const express = require('express');
const authRoutes = require('./routes/auth-routes');
const app = express();

app.set('view engine', 'ejs');

// Set up routes
app.use('/auth', authRoutes);

app.get('/', function(req, res) {
    res.render('home');
});

app.listen(3000, function() {
    console.log('App listening on port 3000');
});

The Routes

URL	Purpose
/auth/google	Start the OAuth flow — redirect to Google
/auth/google/redirect	Google redirects here after login — the callback
/auth/logout	Log the user out and destroy the session

Key Takeaways

• /auth/google initiates the OAuth flow — Passport will handle the redirect
• /auth/google/redirect is the callback URL — Google sends the user back here
• All auth routes are prefixed with /auth using app.use('/auth', authRoutes)
• The callback URL must match exactly what you register in the Google Developer Console