alfadocs-connected-app-oauth

What problem does it solve?

This Skill removes the complexity of building secure AlfaDocs sign-in for connected and marketplace apps, where each practice authenticates with its own account instead of using a shared API key.

Core Features & Use Cases

• OAuth2 + PKCE Login Flow: Handles the full AlfaDocs authorization flow through a single Supabase Edge Function, keeping client secrets and access tokens off the browser.
• Server-Side Session Management: Stores tokens behind an HttpOnly session cookie, supports session checks and logout, and avoids unsafe local storage patterns.
• Production App Integration: Guides React routing, protected pages, redirect URI matching, scope selection, token refresh, and API proxying for real-world marketplace apps.
• Use Case: Build a Lovable app that lets multiple AlfaDocs practices sign in individually, then securely fetch practice-specific data from server-side functions.

Quick Start

Use this Skill to implement secure AlfaDocs sign-in for a Lovable app with a single Supabase Edge Function, exact redirect configuration, and server-side session handling.