auth

What problem does it solve?

Implementing robust authentication and access control is inherently complex and prone to security vulnerabilities. This skill provides a standardized, secure, and multi-tenant ready authentication system for Next.js 15 + Supabase applications, eliminating common security pitfalls and development overhead.

Core Features & Use Cases

• Comprehensive Auth: Handles login, logout, registration with email verification, and OAuth (GitHub) using Supabase's secure httpOnly cookie-based sessions.
• Hybrid Route Protection: Secures Next.js Server Components and Server Actions with role-based access (Admin/Member) and multi-tenant family-based data isolation.
• Data Privacy: Enforces strict data access with Row Level Security (RLS) policies, ensuring users only access their own family's data.
• Use Case: Quickly implement an admin-only page that redirects unauthorized users, or secure a Server Action to ensure only members of a specific family can modify their data.

Quick Start

Protect the '/settings' route in a Next.js Server Component, redirecting unauthenticated users to '/login'.