Authentication API

Complete guide to BlockForge authentication using Supabase Auth.

Overview

BlockForge uses Supabase Auth for user authentication. This guide covers authentication methods and best practices.

Getting Started

import { createClient } from '@supabase/supabase-js'

const supabase = createClient(
  process.env.VITE_SUPABASE_URL,
  process.env.VITE_SUPABASE_ANON_KEY
)

Sign Up

Email/Password

const { data, error } = await supabase.auth.signUp({
  email: 'user@example.com',
  password: 'password123',
  options: {
    emailRedirectTo: 'https://blockforge.pro/confirm'
  }
})

OAuth Providers

// GitHub
const { data, error } = await supabase.auth.signInWithOAuth({
  provider: 'github',
  options: {
    redirectTo: 'https://blockforge.pro/callback'
  }
})

// Google
const { data, error } = await supabase.auth.signInWithOAuth({
  provider: 'google'
})

Sign In

Email/Password

const { data, error } = await supabase.auth.signInWithPassword({
  email: 'user@example.com',
  password: 'password123'
})

OAuth

const { data, error } = await supabase.auth.signInWithOAuth({
  provider: 'github'
})

Sign Out

const { error } = await supabase.auth.signOut()

Session Management

Get Current Session

const { data: { session } } = await supabase.auth.getSession()

Get Current User

const { data: { user } } = await supabase.auth.getUser()

Listen to Auth Changes

supabase.auth.onAuthStateChange((event, session) => {
  if (event === 'SIGNED_IN') {
    console.log('User signed in:', session.user)
  } else if (event === 'SIGNED_OUT') {
    console.log('User signed out')
  }
})

Password Management

Reset Password

const { error } = await supabase.auth.resetPasswordForEmail('user@example.com', {
  redirectTo: 'https://blockforge.pro/reset-password'
})

Update Password

const { error } = await supabase.auth.updateUser({
  password: 'newpassword123'
})

User Management

Update User

const { data, error } = await supabase.auth.updateUser({
  email: 'newemail@example.com',
  data: {
    display_name: 'John Doe'
  }
})

Delete User

const { error } = await supabase.auth.admin.deleteUser(userId)

Security Best Practices

1. Use HTTPS - Always use HTTPS in production
2. Secure passwords - Enforce strong passwords
3. Session management - Implement proper session handling
4. Rate limiting - Protect against brute force
5. Email verification - Verify user emails

Next Steps

• Pages API
• Tasks API
• Supabase Auth Docs