Demo of using OAuth2 and restricted Google Email domain to login to an app.
create/modify config.rb to have the following
ENV['G_API_CLIENT'] = "..."
ENV['G_API_SECRET'] = "..."
If you want to restrict the domain that can login, the :hd parameter does that.