Supabase Authentication — Complete User Auth Setup for Your App

# email_auth.py
# Email/password signup and login

import os
from supabase import create_client, Client

url = os.getenv("SUPABASE_URL", "https://example.supabase.co")
key = os.getenv("SUPABASE_ANON_KEY", "your-anon-key")
supabase: Client = create_client(url, key)

def sign_up(email: str, password: str):
    response = supabase.auth.sign_up({
        "email": email,
        "password": password,
    })
    print(f"Sign up response: {response}")
    if response.user:
        print(f"User created: {response.user.id}")
        print(f"Confirmation email sent to: {email}")
    return response

def sign_in(email: str, password: str):
    response = supabase.auth.sign_in_with_password({
        "email": email,
        "password": password,
    })
    print(f"Sign in response: {response}")
    if response.session:
        print(f"Session created: {response.session.access_token[:20]}...")
        print(f"User: {response.user.email}")
    return response

def sign_out():
    response = supabase.auth.sign_out()
    print("Signed out successfully")
    return response

sign_up("user@example.com", "secure-password-123")
sign_in("user@example.com", "secure-password-123")

# oauth_auth.py
# OAuth authentication with Supabase

def configure_oauth():
    providers = {
        "Google": "Configure in Supabase Dashboard > Authentication > Providers",
        "GitHub": "Register OAuth app in GitHub Developer Settings",
        "Discord": "Create app in Discord Developer Portal",
        "Facebook": "Configure in Facebook Developers",
        "Apple": "Requires Apple Developer account",
        "Twitter": "Configure in Twitter Developer Portal",
    }
    
    print("OAuth Provider Configuration:")
    print()
    print("Dashboard setup:")
    print("  1. Go to Authentication > Providers in Supabase Dashboard")
    print("  2. Enable the provider you want")
    print("  3. Enter Client ID and Client Secret from the provider")
    print("  4. Set the redirect URL (shown in Supabase Dashboard)")
    print()
    print("Client-side sign-in:")
    print("  supabase.auth.signInWithOAuth({ provider: 'google' })")

def sign_in_with_google():
    print("Initiating Google OAuth...")
    print("  Redirecting to Google consent screen...")
    print("  User authorized...")
    print("  Redirecting back to application...")
    print("  Session established with JWT token")
    print("  User: user@gmail.com (from Google profile)")

configure_oauth()
sign_in_with_google()

# magic_link.py
# Magic link authentication

def send_magic_link(email: str):
    supabase = create_client(
        os.getenv("SUPABASE_URL", "https://example.supabase.co"),
        os.getenv("SUPABASE_ANON_KEY", "your-anon-key")
    )
    
    response = supabase.auth.sign_in_with_otp({
        "email": email,
    })
    
    print(f"Magic link sent to: {email}")
    print(f"Response: {response}")
    print("User clicks link in email to sign in automatically")

send_magic_link("user@example.com")

# session.py
# Session management with Supabase

import os
from supabase import create_client

supabase = create_client(
    os.getenv("SUPABASE_URL", "https://example.supabase.co"),
    os.getenv("SUPABASE_ANON_KEY", "your-anon-key")
)

def get_session():
    session = supabase.auth.get_session()
    if session:
        print(f"Active session found")
        print(f"Access token: {session.access_token[:30]}...")
        print(f"Expires at: {session.expires_at}")
        return session
    else:
        print("No active session")
        return None

def get_user():
    user = supabase.auth.get_user()
    if user:
        print(f"Current user: {user.user.email}")
        print(f"User ID: {user.user.id}")
        return user
    else:
        print("No user logged in")
        return None

def refresh_session():
    session = supabase.auth.refresh_session()
    print(f"Session refreshed")
    print(f"New token: {session.access_token[:30]}...")

get_session()
get_user()

def auth_module():
    features = [
        "User registration with email/password",
        "User login with email/password",
        "Google OAuth provider integration",
        "GitHub OAuth provider integration",
        "Magic link passwordless login",
        "Session persistence on page reload",
        "Automatic token refresh",
        "Sign out with session cleanup",
        "Protected route guard",
        "User profile data access",
    ]
    
    print("Auth Module Features:")
    for feature in features:
        print(f"  [ ] {feature}")

auth_module()