Elysia's set.redirect returns 200 OK instead of 302 redirect on the current version. Use set.status = 302 + set.headers['Location'] instead for both /auth/google (Google OAuth redirect) and /auth/google/callback (all redirect paths: errors, success token delivery). Co-Authored-By: Claude <noreply@anthropic.com>