worldcrafter-auth-guard

Protect routes and server actions by enforcing authentication checks using Supabase Auth. Implement guards on layouts, pages, and server action endpoints to verify user sessions with HTTP-only cookies, redirecting unauthenticated users to /login before allowing access to protected resources.

Implement RBAC using a 5-tier role system (OWNER, ADMIN, EDITOR, COMMENTER, VIEWER) with Supabase Auth. Apply requireRole helpers to gate routes and actions by user permission level, ensuring users can only perform operations their role permits.

Yes. Supabase Auth integrates across server components, layouts, API routes, and server actions. Use middleware-based session management with HTTP-only cookies and continuous session refresh to maintain authenticated state across your entire application.

Store sessions in HTTP-only cookies for security and implement post-login redirects to dashboards or specified routes. Use continuous session refresh patterns to keep users authenticated across page navigations and API calls without exposing tokens.

Yes. Supabase Auth supports OAuth providers and email verification flows. You can enforce password strength requirements, implement account lockout policies, and enable API key authentication for programmatic access within protected routes and server actions.

Protect API endpoints and dashboards using Supabase session validation in middleware and route handlers. Combine layout-level protection with server action guards and API route authentication to enforce consistent access control across your entire application.