Auth Setup

Add Supabase Auth (magic link) and configure Resend for production email delivery.

This skill is called by the vibe-ship orchestrator. FRAMEWORK = nextjs or vite.

lib/supabase.ts (Next.js) or src/lib/supabase.ts (Vite) and all Supabase env vars were created in the previous supabase-setup step.

1. Review Supabase Auth approach

This skill uses Supabase Auth (built into @supabase/supabase-js) — not Better Auth or any third-party auth library. Key patterns:

• Magic link OTP via supabase.auth.signInWithOtp()
• Session management via supabase.auth.onAuthStateChange()
• Always pass emailRedirectTo: window.location.origin so links work in both local dev and production

2. Enable Supabase Auth providers

Email is enabled by default on new Supabase projects. No dashboard action needed.