Add secure Google sign-in to Progmasoft Account. Use the server-side authorization-code flow with an exact account-domain callback, temporary hardened external cookies, verified provider email matching, canonical Account-name creation for new users, and no separate ViGet publisher identity. Add frontend entry points, provider failure guidance, locked Google authentication dependencies, service secret injection, and backend regression coverage without committing OAuth credentials.1.0.0

1 files changed, 20 insertions, 2 deletions

diff --git a/apps/web/app/register/page.tsx b/apps/web/app/register/page.tsx
index 97c63e5..d120d45 100644
--- a/apps/web/app/register/page.tsx
+++ b/apps/web/app/register/page.tsx
@@ -10,14 +10,32 @@ export const metadata: Metadata = {
   robots: { index: false, follow: false },
 };
 
-export default function RegisterPage() {
+interface RegisterPageProps {
+  searchParams: Promise<{ google?: string }>;
+}
+
+const googleMessages: Record<string, string> = {
+  "account-name-required":
+    "Choose an Account name before continuing with Google.",
+  "account-name-unavailable":
+    "That Account name is unavailable. Choose another name.",
+  "invalid-account-name":
+    "Use a valid Account name before continuing with Google.",
+};
+
+export default async function RegisterPage({
+  searchParams,
+}: RegisterPageProps) {
+  const { google } = await searchParams;
+  const initialMessage = google ? googleMessages[google] : undefined;
+
   return (
     <AccountShell
       eyebrow="Create an identity"
       title="Start with a durable account."
       description="Choose the name used in your Progmasoft account URL."
     >
-      <AuthForm mode="register" />
+      <AuthForm initialMessage={initialMessage} mode="register" />
     </AccountShell>
   );
 }