Authentication API

Authentication is handled by Supabase Auth directly — not through custom API endpoints.

Client-Side Auth

Use the Supabase client SDK in apps/web:

import { createClient } from "@/lib/supabase/client";

// Login
const supabase = createClient();
const { data, error } = await supabase.auth.signInWithPassword({
  email: "user@example.com",
  password: "password",
});

// Signup
const { data, error } = await supabase.auth.signUp({
  email: "user@example.com",
  password: "password",
  options: {
    data: { full_name: "John Doe" },
  },
});

API Token Verification

The NestJS API verifies tokens via the SupabaseGuard:

@UseGuards(SupabaseGuard)
@Get("protected")
getProtected(@Req() req) {
  const user = req.user; // Verified Supabase user
  return { userId: user.id };
}