Add GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET to your .env file, then set up a Google OAuth app at Google Cloud Console.