Google OAuth redirect_uri_mismatch Triage

This skill covers Google OAuth failures where Google rejects the redirect_uri before control returns to SpotDraft. The key distinction is whether Oogway generated a malformed callback URL or whether the callback URL is valid but missing from the Google OAuth client configuration.

When to Use

• Browser shows Error 400: redirect_uri_mismatch
• Error text says the app does not comply with Google's OAuth 2.0 policy
• Google login or signup is broken in one environment or globally
• Trial OAuth signup is broken
• The failing URL shows a double slash or suspicious URL join
• The incident started after an oogway deploy, dependency upgrade, or cherry-pick

Do Not Use

• User reaches SpotDraft callback and then gets a Django or Oogway 4xx/5xx
• Issue is Microsoft OAuth only
• Failure is in SAML / IdP setup rather than Google OAuth
• Login succeeds but workspace routing or cluster mapping fails after callback