handling-authentication

Supabase authentication in React is handled by implementing secure login, signup, and OAuth flows. The Skill manages user sessions, token refresh, and persistence, while providing an authentication context to widgets and protecting specific application routes.

Yes, Supabase Auth supports OAuth flows for both Google and GitHub. The Skill handles these OAuth integrations for user login, allowing new users to sign up via their social accounts and redirecting them to an onboarding page to set up their profile.

The best way to protect React routes is by implementing route protection checks that ensure only authenticated and authorized users can access specific application features. This Skill handles those permission checks for service-level authorization and route access.

Widget authentication context provides secure, read-only access to user data for widgets. It intentionally limits exposure by only sharing the display name, ensuring widgets do not see sensitive information like user emails or authentication tokens.

Yes, the Skill handles local development mode by providing a demo user. This allows developers to test authentication flows, session management, and protected routes locally without needing a live backend or real user credentials.

Authorization for Supabase service-level features is managed by implementing permission checks within the authentication framework. The Skill ensures secure access to data and features by validating user permissions and restricting access to authorized users only.