Google Login in React
Google sign-in: frontend gets an id token from Google’s button/SDK, POSTs it to your API, API verifies with Google and starts a session/JWT. Never put the Google client secret in React. Don’t treat a decoded JWT in the browser as proof — verify server-side.
Google Login in React — output — three steps. Frontend never holds the Google client secret.
Exam tip
OAuth token verified on the backend.