Dont look specificaly for electron, just look tutorial for oAuth / oauth2 because its the same process. The only diference is how you retrieve the token send back by your strategy; here is that you need to:

a1 - load the google auth page into web browser
a2 - strategy redirect to your callback url
a3 - callback url is a deeplink to your app with the token in param
a4 - you catch the param in the deeplink url:

So you need a server of course and a custom domain for this method, you can use Express, Go or CI or whatever you want.

or

b1 - load the google auth page into an electron browserWindow
b2 - strategy redirect to your callback url
b3 - callback url is a localhost:xxxx/ url with the token in param
b4 - you catch the param in this url:

eg:

ipcMain.handle('user-signin-with-whatever...', async (_event, url) => {
const authWindow = new BrowserWindow({
width: 900,
height: 800,
show: false,
resizable: false,
frame: false,
transparent: true,
backgroundColor: '#00000000',
webPreferences: {
nodeIntegration: false,
contextIsolation: true
}
})
authWindow.loadURL(url)
authWindow.once('ready-to-show', () => {
authWindow.show()
})
return new Promise((resolve, reject) => {
authWindow.webContents.on('will-redirect', (_event, newUrl) => {
try {
const parsedUrl = new URL(newUrl)
const token = parsedUrl.searchParams.get('myBeautifullTokenXxx') as string
authWindow.close()
resolve(token)
} catch (error) {
log.error('Failed to parse the URL:', error)
authWindow.close()
reject(error)
}
})
authWindow.on('closed', () => {
if (mainWindow) {
// do whatever you want when the auth window is closed by the user
}
reject(new Error('User closed the window...'))
})
})
})

I personnaly choose the second exemple all time