PUBLIC SANDBOX · SYNTHETIC DATA ONLY
Google access laboratory
An isolated Google sign-in test on ChatGPT Sites. This landing page is open to everyone. Synthetic report access is checked on the server.
Google sign-in
Checking Google configuration…
No Google API access, refresh token or client secret is requested. The ID token stays in browser memory and is verified on the server for every protected request. Reloading clears it; the sign-in challenge expires after 10 minutes.
Test boundaries
- Direct Google Identity Services integration. No ChatGPT account is required by this application.
- Google credentials are verified against Google’s signing keys, issuer, audience, expiry, nonce and the configured account allowlist.
- No real employee data, production backend or database is connected.
- Code readiness and negative tests are separate from a completed real Google sign-in.
Until a Google Web client and test-account allowlist are configured, sign-in stays disabled and protected routes fail closed.
This test does not intentionally persist Google profile information or ID tokens. A short-lived secure cookie binds sign-in to this browser. Hosting and provider operational logs may still exist. Do not enter real HR data.