MAILRAFT / DOCS V1
Google Sign-In
Sign-In uses Supabase Auth with openid, email and profile only. It does not grant Gmail access. Sessions use Secure, HttpOnly, host-only cookies on app.mailraft.com.
The deployed Auth configuration determines the Google callback. The production generator configures https://app.mailraft.com/auth/callback and the application exchange at https://app.mailraft.com/api/auth/google/callback. Console registration and owner consent must be verified separately.