5 · Sign in with GitHub (optional)
Add a "Continue with GitHub" button to your shop's login, alongside the built-in magic-link.
By default, customers sign in to your shop with a magic link (a one-tap email link) — no passwords, nothing to configure. If you'd also like a "Continue with GitHub" button, you can turn it on. It's optional and off by default.
When is this useful?
Developer-facing or technical shops whose customers already have GitHub accounts. For a normal consumer store, the built-in magic-link is usually all you need — feel free to skip this page.
Turn it on
-
Create a GitHub OAuth App.
Go to github.com/settings/developers → OAuth Apps → New OAuth App:
- Application name — your shop's name.
- Homepage URL —
https://yourshop.com(or your.vercel.appURL). - Authorization callback URL —
https://yourshop.com/api/auth/callback/github(use your real domain).
Click Register application, then Generate a new client secret. Copy the Client ID and Client secret.
-
Add the two keys to Vercel.
In Project → Settings → Environment Variables, add:
GITHUB_CLIENT_IDGITHUB_CLIENT_SECRET
(Add them locally to
.env.localtoo if you want to test onlocalhost— use a second OAuth App with thehttp://localhost:3000/...callback.) -
Enable the feature flag.
In
brand.config.ts, set:
features: {
// …
githubAuth: true,
}Commit and push (the everyday loop). Vercel redeploys, and a Continue with GitHub button appears on your login page next to the magic-link form.
Admin access is still yours alone
Signing in with GitHub creates (or links) a customer account. It does not grant admin rights — admin is a separate role you control in the database. So enabling this is safe: a random GitHub user can register as a customer, never as an admin.
Same email = same account
If someone already has a magic-link account with the same email as their GitHub account, the two are linked automatically — they end up as one customer, however they sign in.
That's it — you've completed the full journey, from a folder on your laptop to a live shop with your choice of logins. Back to the overview.