nextjs-supabase-auth

To set up Next.js authentication with Supabase, copy the templates directory into your project, configure environment variables, apply migrations, and set redirects in the auth config to enable email/password and Google OAuth with PKCE flow.

Supabase authentication enforces the PKCE flow for OAuth integration in Next.js, ensuring secure authorization code exchange and protecting against interception attacks during the sign-up and login processes.

Protecting routes in a Next.js Supabase application is handled via middleware that validates user sessions, combined with centralized type-safe configuration to manage access control across the app securely.

Auto profile creation is supported after Supabase email signup, automatically generating user profile records upon successful registration and email confirmation without requiring manual database triggers.

This Supabase authentication template is built for Next.js 15 and requires an existing Next.js and Supabase project to operate, providing environment validation and deploy-friendly redirects out of the box.

Password reset and email confirmation flows are configured through centralized environment variables and the auth configuration file, enabling secure credential recovery and verification automatically.