Sign In with Google for Magento 2

Overview

Boost conversions and streamline customer registration with Sign In with Google for Magento 2. Enable secure, one-click login using Google OAuth 2.0, reduce friction, and improve checkout speed—all while maintaining enterprise-grade security.

Features

• ✓ No core file modifications required
• ✓ Installed via Composer, no manual file copying
• ✓ Full, un-obfuscated source code — read every line
• ✓ Built to Magento & PSR coding standards
• ✓ 12 months of updates & support included
• ✓ See the Compatibility tab for theme & edition support

Specifications

Compatibility

• ✓ Magento Open Source (Community)
• ✓ Magento Commerce (Enterprise)
• ✓ Magento Commerce Cloud
• ✓ Magento B2B
• ✓ Magento 2.3.x
• ✓ Magento 2.4.x

Installation

1. Require the package via Composer using the key you received by email.
2. Enable the module with bin/magento module:enable.
3. Run setup:upgrade to apply the module's schema and data.
4. Flush the cache and you're done - no static content deploy needed on Hyvä.

Changelog

• v1.0.0 Aug 2025

  Changelog

  All notable changes to this project will be documented in this file.

  The format is based on Keep a Changelog,
  and this project adheres to Semantic Versioning.

  [1.0.0] - 2025-08-08

  Added

  • Initial release of MagedIn Sign In with Google module
  • Complete Google OAuth 2.0 authentication integration for Magento 2
  • Google One Tap (Auto-Prompt) functionality with modern ID token-based authentication
  • Automatic customer account creation for new Google users
  • Account linking system using unique google_id customer attribute
  • Dual authentication methods supporting both OAuth flow and direct ID token validation

  Authentication Features

  • Google OAuth 2.0 Integration: Complete implementation of OAuth 2.0 authorization code flow
  • Google One Tap Support: Modern popup-based authentication with ID token validation
  • Account Creation: Automatic customer account creation with configurable customer group assignment
  • Account Linking: Secure linking of existing Magento accounts with Google accounts
  • Email Verification: Only accepts Google accounts with verified email addresses
  • Domain Restrictions: Optional email domain filtering for enterprise environments

  Security Implementation

  • State Parameter Validation: CSRF protection using secure random state tokens stored in session
  • ID Token Verification: Comprehensive audience and expiration validation for Google ID tokens
  • Session Security: Automatic session regeneration after authentication to prevent fixation attacks
  • Encrypted Storage: Client secret stored encrypted in Magento configuration
  • CSP Compliance: Complete Content Security Policy configuration for Google domains
  • Error Logging: Comprehensive logging for security events and authentication failures

  Configuration System

  • Master Enable/Disable: Global toggle for entire functionality
  • OAuth Configuration: Secure storage of Google Client ID and encrypted Client Secret
  • Account Settings: Configurable auto-account creation and default customer group assignment
  • Domain Restrictions: Optional allowed email domains configuration
  • Button Customization: Comprehensive appearance options including theme, size, shape, and alignment
  • Auto-Prompt Settings: Google One Tap configuration with dismiss and auto-select options

  User Interface

  • Sign-In Button: Customizable Google Sign-In button with multiple theme options
  • Button Themes: Outline, filled blue, or filled black styling options
  • Size Options: Large, medium, or small button sizes
  • Shape Variants: Rectangular, pill, circle, or square button shapes
  • Logo Alignment: Left or center alignment of Google logo
  • Responsive Design: Mobile-optimized interfaces and popup dialogs

  Technical Architecture

  • Service Layer Design: Clean service interfaces with OAuth and customer authentication services
  • Configuration Management: Scope-aware configuration system with multi-store support
  • Database Integration: Custom customer attribute with unique constraint enforcement
  • Controller Implementation: Secure OAuth flow handling with proper CSRF exemption
  • Frontend Integration: Modern Google Identity Services API implementation
  • Block Components: Reusable SignInButton and AutoPrompt blocks

  Admin Configuration

  • System Configuration: Complete admin panel configuration interface
  • Appearance Settings: Visual button customization options in admin
  • Security Settings: OAuth credentials and domain restriction configuration
  • Auto-Prompt Controls: One Tap popup behavior configuration
  • Store Scope Support: Full multi-store and multi-website configuration support

  Frontend Integration

  • Layout Integration: Automatic placement on customer login and registration pages
  • JavaScript Implementation: Modern ES6+ JavaScript with Google Identity Services API
  • CSS Styling: Theme-aware styling with responsive design considerations
  • NoScript Fallback: Graceful degradation for non-JavaScript environments
  • Error Handling: User-friendly error messages with proper feedback

  Database Schema

  • Customer Attribute: Added google_id customer attribute via data patch
  • Unique Constraint: Ensures one Google account per customer mapping
  • No Additional Tables: Leverages existing Magento customer entity structure
  • Backward Compatibility: Safe schema updates with proper versioning

  Security Features

  • State Management: Cryptographically secure state generation and session validation
  • Token Validation: Comprehensive Google ID token validation with proper audience checks
  • Domain Validation: Enterprise-grade email domain restriction capabilities
  • Session Handling: Secure session management with automatic regeneration
  • CSRF Protection: Complete cross-site request forgery protection
  • Audit Logging: Detailed security event logging for compliance

  API Integration

  • Google OAuth 2.0: Full implementation of OAuth 2.0 authorization code flow
  • Google Identity Services: Integration with modern Google Identity Services API
  • Token Exchange: Secure authorization code to access token exchange
  • User Information: Google userinfo API integration for profile data
  • ID Token Processing: Direct Google ID token validation and processing

  Documentation

  • Technical Implementation: Comprehensive code documentation with PHPDoc standards
  • Configuration Guide: Detailed admin configuration instructions
  • Integration Documentation: Frontend and backend integration guidelines
  • Security Documentation: Security best practices and implementation details
  • Troubleshooting Guide: Common issues and resolution procedures