OAuth Providers

Layers supports two OAuth identity providers in addition to email/password:

• Google — works with personal accounts and Google Workspace.
• GitHub — recommended for engineers.

Apple sign-in is not currently supported.

Callback URL

The OAuth callback lands at /auth/callback and exchanges the provider code for a Layers session. If the callback fails (for example, you cancelled in the provider's dialog), you're redirected to /auth/signin with an error message.

VSCode flow

In VSCode, the OAuth round-trip uses a deep link back into the extension so sign-in completes inside the editor. Install the extension first if OAuth in the editor isn't working.

Scopes

Layers asks for the minimum scope required to confirm identity and populate your profile (name, email, avatar). The GitHub integration for App Machina is a separate OAuth grant with repository scopes — not part of sign-in.