supabase-email-auth

Email and password authentication in Next.js requires a backend service like Supabase to handle signup, login, and password reset securely. This Skill provides ready-to-use client and server utilities, login and registration page templates, and middleware protection for Next.js 13+ apps using the App Router, reducing setup time and common auth pitfalls.

Yes. Supabase email authentication works with Next.js 13+ apps using the App Router. This Skill delivers signup, login, password reset, OAuth callback with PKCE flow, and middleware-protected routes, plus admin role-based access control via email whitelists.

PKCE (Proof Key for Code Exchange) is a security extension for OAuth that prevents authorization code interception attacks. This Skill implements PKCE in OAuth callbacks to protect user sessions when authenticating with Supabase.

Middleware protection and admin role verification secure routes and restrict access. This Skill provides middleware templates and admin checks via email whitelists and an app_users schema, plus a service-role admin client for server-side authorization logic.

Supabase authentication requires NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY, and SUPABASE_SERVICE_ROLE_KEY. Optionally, add ADMIN_EMAILS to define admin users. This Skill includes environment setup guidance and troubleshooting resources.

Yes. This Skill covers password reset flows, OAuth callback handlers with PKCE, and complete end-to-end authentication including signup, login, and session management for Next.js 13+ apps.