Skip to main content

Connect Google Workspace

Ori attentive

Connect Google to enable Calendar, Gmail, Tasks, and more.

Prerequisites​

  • A Google account
  • Access to Google Cloud Console (for creating OAuth credentials)

Step 1: Create a Google Cloud Project​

  1. Go to console.cloud.google.com
  2. Click the project dropdown at the top and select New Project
  3. Enter a project name (e.g., "Orient Integration")
  4. Click Create

Step 2: Enable APIs​

Important: Enable APIs First

You must enable each Google API before Orient can access it. Without enabling these APIs, you will get "API not enabled" or "unauthorized" errors even after successful OAuth authentication.

  1. Go to APIs and Services, then Library
  2. Search for and enable each of these APIs:
    • Gmail API - Required for email access
    • Google Calendar API - Required for calendar access
    • Google Tasks API - Required for tasks access
    • Google Sheets API (optional) - For spreadsheet access
    • Google Slides API (optional) - For presentation access
    • Google Drive API (optional) - For file access
tip

Click on each API and make sure you see "API enabled" with a green checkmark. If you see "Enable", click it to activate the API for your project.

  1. Go to APIs and Services, then OAuth consent screen
  2. Choose External (or Internal if using Google Workspace)
  3. Fill in the required fields:
    • App name: Orient
    • User support email: your email
    • Developer contact: your email
  4. Click Save and Continue
  5. On the Scopes screen, click Add or Remove Scopes and add:
    • https://www.googleapis.com/auth/gmail.readonly
    • https://www.googleapis.com/auth/gmail.send
    • https://www.googleapis.com/auth/calendar
    • https://www.googleapis.com/auth/tasks
  6. Click Save and Continue through the remaining steps
Test Mode

If you chose "External", your app will be in test mode. You need to add your email as a test user under OAuth consent screen, then Test users.

Step 4: Create OAuth Credentials​

  1. Go to APIs and Services, then Credentials
  2. Click Create Credentials, then OAuth client ID
  3. Choose Web application
  4. Set the name (e.g., "Orient Dashboard")
  5. Under Authorized redirect URIs, add:
    • http://localhost:8766/oauth/callback (for local development)
    • Your production callback URL if deploying
  6. Click Create
  7. Copy the Client ID and Client Secret

Step 5: Configure Orient​

Add the credentials to Orient via the Dashboard Secrets panel or your .env file:

GOOGLE_OAUTH_CLIENT_ID=your-client-id.apps.googleusercontent.com
GOOGLE_OAUTH_CLIENT_SECRET=your-client-secret

Step 6: Connect Your Account​

  1. Go to the Dashboard, then the Integrations tab
  2. Find Google in the catalog
  3. Click Connect
  4. A popup will open for Google OAuth
  5. Sign in with your Google account and grant permissions

Once connected, Orient can access your Calendar, Gmail, and Tasks!

Features Available with Google​

  • Calendar: View upcoming events, create meetings
  • Gmail: Read emails, send messages
  • Tasks: View and manage your task lists

Troubleshooting​

ProblemSolution
"API not enabled" or "unauthorized"Go to Google Cloud Console → APIs & Services → Library, and enable each API (Calendar, Gmail, Tasks, etc.)
Calendar/Gmail not working after OAuthVerify the specific API is enabled in Google Cloud Console. OAuth success doesn't mean APIs are enabled.
OAuth popup blockedAllow popups for localhost in your browser
"Access denied"Add your email as a test user in OAuth consent screen
Redirect URI mismatchEnsure http://localhost:8766/oauth/callback is in authorized URIs
"App not verified" warningClick "Advanced", then "Go to Orient (unsafe)" during testing
Token refresh failsDisconnect and reconnect your Google account in Dashboard → Integrations

Next Steps​