# OAuth Providers (/docs/account/oauth)



Layers supports two OAuth identity providers in addition to email/password:

* **Google** — works with personal accounts and Google Workspace.
* **GitHub** — recommended for engineers.

Apple sign-in is not currently supported.

## Callback URL [#callback-url]

The OAuth callback lands at `/auth/callback` and exchanges the provider code
for a Layers session. If the callback fails (for example, you cancelled in the
provider's dialog), you're redirected to `/auth/signin` with an error message.

## VSCode flow [#vscode-flow]

In VSCode, the OAuth round-trip uses a deep link back into the extension so
sign-in completes inside the editor. Install the extension first if OAuth in
the editor isn't working.

## Scopes [#scopes]

Layers asks for the minimum scope required to confirm identity and populate
your profile (name, email, avatar). The GitHub integration for App Machina
is a separate OAuth grant with repository scopes — not part of sign-in.
