Why Supabase Auth handles identity - See It in Action

Why Supabase Auth Handles Identity

📖 Scenario: You are building a simple web app that needs to know who the user is. To do this, you will use Supabase Auth, which helps manage user identity securely and easily.

🎯 Goal: Learn how to set up Supabase Auth to handle user identity by creating a user session, configuring authentication settings, and retrieving the current user's information.

📋 What You'll Learn

Create a Supabase client with the project URL and anon key

Set up authentication configuration with redirect URLs

Write code to sign in a user with email and password

Retrieve and display the current authenticated user's ID

💡 Why This Matters

🌍 Real World

Supabase Auth is used in real apps to securely identify users without building complex authentication systems from scratch.

💼 Career

Understanding how to handle user identity with Supabase Auth is valuable for cloud developers building modern web and mobile applications.

1

Create the Supabase client

Create a variable called supabase by calling createClient with the exact project URL "https://xyzcompany.supabase.co" and anon key "public-anon-key".

Supabase

# Your code here

Hint

Use createClient from @supabase/supabase-js with the exact URL and key.

2

Configure authentication settings

Create a constant called authConfig as an object with a property redirectTo set to "https://yourapp.com/welcome".

Supabase

import { createClient } from '@supabase/supabase-js';

const supabase = createClient('https://xyzcompany.supabase.co', 'public-anon-key');

// Your code here

Hint

Set redirectTo to the welcome page URL where users go after sign-in.

3

Sign in a user with email and password

Write an async function called signInUser that calls supabase.auth.signInWithPassword with an object containing email: '[e-mail]' and password: 'password123', passing authConfig as the second argument.

Supabase

import { createClient } from '@supabase/supabase-js';

const supabase = createClient('https://xyzcompany.supabase.co', 'public-anon-key');

const authConfig = { redirectTo: 'https://yourapp.com/welcome' };

// Your code here

Hint

Use signInWithPassword with email and password, and pass authConfig for redirect.

4

Retrieve and display the current user's ID

Write a function called getCurrentUserId that returns supabase.auth.getUser() and extracts the id from the data.user object.

Supabase

import { createClient } from '@supabase/supabase-js';

const supabase = createClient('https://xyzcompany.supabase.co', 'public-anon-key');

const authConfig = { redirectTo: 'https://yourapp.com/welcome' };

async function signInUser() {
  const { data, error } = await supabase.auth.signInWithPassword({
    email: '[e-mail]',
    password: 'password123'
  }, authConfig);
}

// Your code here

Hint

Use supabase.auth.getUser() to get the current user and return their id.

Practice

1. What is the main purpose of Supabase Auth in an application?

easy

A. To manage user identity and authentication securely

B. To store large files and media

C. To create database tables automatically

D. To handle server backups

Solution

1. Step 1: Understand Supabase Auth's role

   Supabase Auth is designed to handle user login and identity management securely.

2. Step 2: Compare with other options

   Storing files, creating tables, and backups are handled by other Supabase services, not Auth.

3. Final Answer:

   To manage user identity and authentication securely -> Option A

4. Quick Check:

   Supabase Auth = user identity management [OK]

Hint: Auth means user login and identity management [OK]

Common Mistakes:

• Confusing Auth with file storage
• Thinking Auth creates database tables
• Assuming Auth handles backups

2. Which of the following is the correct way to initialize Supabase Auth in a JavaScript app?

easy

A. const supabase = new SupabaseAuth('url', 'key');

B. const supabase = createClient('url', 'key');

C. const supabase = supabase.auth('url', 'key');

D. const supabase = supabaseClient('url', 'key');

Solution

1. Step 1: Recall Supabase client initialization

   Supabase uses createClient(url, key) to initialize the client including Auth.

2. Step 2: Check other options

   Options B, C, and D use incorrect constructors or methods not in Supabase docs.

3. Final Answer:

   const supabase = createClient('url', 'key'); -> Option B

4. Quick Check:

   Use createClient() to initialize Supabase [OK]

Hint: Use createClient() to start Supabase Auth [OK]

Common Mistakes:

• Using new keyword incorrectly
• Calling auth() as a function to initialize
• Misspelling createClient

3. Given this code snippet, what will console.log(user.email) output after a successful login?

const { data, error } = await supabase.auth.signInWithPassword({ email: '[e-mail]', password: 'pass123' }); const user = data.user;

medium

A. An error object

B. undefined

C. null

D. '[e-mail]'

Solution

1. Step 1: Understand signInWithPassword result

   On success, data.user contains user info including email.

2. Step 2: Check user.email value

   Since login is successful, user.email matches the input email '[e-mail]'.

3. Final Answer:

   '[e-mail]' -> Option D

4. Quick Check:

   Successful login returns user email [OK]

Hint: Successful login returns user object with email [OK]

Common Mistakes:

• Assuming user is null on success
• Expecting error object instead of user
• Confusing undefined with null

4. What is wrong with this code snippet that tries to sign up a user?

const { data, error } = await supabase.auth.signUp({ email: '[e-mail]' });

medium

A. signUp method does not exist

B. Email format is invalid

C. Password is missing in signUp call

D. Await keyword is not allowed here

Solution

1. Step 1: Check signUp method requirements

   signUp requires both email and password to create a user.

2. Step 2: Identify missing parameter

   The code only provides email, missing password, causing failure.

3. Final Answer:

   Password is missing in signUp call -> Option C

4. Quick Check:

   signUp needs email and password [OK]

Hint: Always provide password when signing up [OK]

Common Mistakes:

• Forgetting password in signUp
• Thinking email alone is enough
• Misusing await outside async

5. How does Supabase Auth help an app track users without extra backend code?

hard

A. It provides built-in user sessions and tokens automatically

B. It requires manual database queries for each user

C. It stores user data only on the client side

D. It disables user tracking for privacy

Solution

1. Step 1: Understand Supabase Auth session management

   Supabase Auth automatically manages user sessions and tokens for identity.

2. Step 2: Compare with other options

   Manual queries or client-only storage are not needed; disabling tracking contradicts purpose.

3. Final Answer:

   It provides built-in user sessions and tokens automatically -> Option A

4. Quick Check:

   Supabase Auth auto-manages sessions [OK]

Hint: Supabase Auth auto-manages sessions and tokens [OK]

Common Mistakes:

• Thinking manual queries are needed
• Believing user data is client-only
• Assuming tracking is disabled