Google OAuth walkthrough
A walkthrough of Google OAuth for Gmail inbox reading: official guides first, one console step at a time, the Google preset on the Integrations page, no secrets in chat, then a Gmail profile smoke test.
Connecting Google means creating an OAuth client you own in Google Cloud, adding it to Minion, and approving the connection. Inbox reading needs the gmail.readonly scope on that client.
This page is the playbook. The full console steps, the Testing-status refresh-token trap and troubleshooting are in Connect Google .
The loop
- Ask for inbox access. The user wants Minion to read Gmail for invoices (for example from Acme) and does not know the steps.
- Look up the guides. Search for Google / Gmail / OAuth, then open
guide:connect_an_integrationand the integration bootstrap guide. - Walk the console. Create the OAuth client in Google Cloud and Google Auth Platform one step at a time: project, enable the Gmail API, branding and External audience, a Web client with redirect
https://app.minion.codes/oauth/callback, the Data Access scopehttps://www.googleapis.com/auth/gmail.readonly, a test user while the app is in Testing, then Publish to Production so refresh tokens are not limited to seven days. - Connect on Minion. An owner or admin opens the Integrations page , sets Provider to Google, and pastes the client ID and secret there (never in chat). Set Default scopes to
openid email gmail.readonly, save the app, then click Connect. An agent can start the same flow withminion.integrations.connect({ provider: 'google', scopes: ['gmail.readonly'] })and hand the person theconnectUrl. - Smoke-test. After authorize, call
createAuthenticatedFetch('google')(fromminion:runtime) orminion.integrations.fetch({ name: 'google', url })againsthttps://gmail.googleapis.com/gmail/v1/users/me/profile. The Google preset allows*.googleapis.comand already asks for offline access with a fresh consent, so a refresh token comes back.
When to use this page
Use it when someone wants a teaching walkthrough of Google OAuth for Gmail inbox reading, or when an agent should see how to coach a user through the console without inventing steps. For the generic OAuth path, see OAuth integrations . For ordering before packages, see Integration bootstrap .