auth

Authenticate users across web, native, and API clients with PKCE and Supabase.

14|2|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/seanchiuai/openclaude --skill auth-seanchiuai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: auth
Source: https://github.com/seanchiuai/openclaude/tree/main/.claude/skills/auth
Command: npx skills add https://github.com/seanchiuai/openclaude --skill auth-seanchiuai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secure authentication and authorization across web, native apps, and API clients using PKCE with Supabase, reducing setup complexity and risk.

Core Features & Use Cases

  • Web: cookie-based sessions via Supabase JS with PKCE flow.
  • Native: Bearer tokens in Authorization headers and native OAuth integrations.
  • API: API key management, OAuth token flows, and user profile linkage in Prisma.

Quick Start

Onboard your environment to enable PKCE-based authentication across web, native, and API contexts.

Frequently Asked Questions about auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement PKCE authentication with Supabase for web applications?

PKCE authentication with Supabase secures web applications using cookie-based sessions via Supabase JS. The PKCE flow handles login and signup while managing server and middleware token validation automatically.

What is the best way to authenticate native apps using Supabase and OAuth?

Native app authentication with Supabase uses Bearer tokens in Authorization headers alongside native OAuth integrations. This approach handles secure login flows and session management tailored for mobile environments.

How do I manage API keys and OAuth token flows for subscription-gated access?

Subscription-gated API access is managed by generating API keys and handling OAuth token flows. User profiles are linked in Prisma, ensuring secure API key management and validation for authorized clients.

Can I use this PKCE auth flow to handle both cookie-based web sessions and Bearer tokens for APIs?

Yes, this PKCE auth flow supports cookie-based web sessions, native Bearer tokens, and API key contexts. It validates tokens and manages sessions seamlessly across server, middleware, and API client environments.

Does Supabase PKCE authentication require Prisma for user profile creation?

Supabase PKCE authentication integrates with Prisma specifically for API contexts to link user profiles. The core web and native authentication flows function independently of the Prisma profile linkage.

Why use PKCE for Supabase authentication across web, native, and API clients?

Using PKCE for Supabase authentication reduces setup complexity and security risks across web, native, and API clients. It provides a standardized flow for secure token validation and session management.