magnuswahlstrand / astro-supabase-vercel

Astro-Supabase-Vercel

This repo contains an example app showcasing how to use Supabase authentication with Astro. We use Supabase is used for user sign-up and authentication, and Astro for a mix of static site generation (SSG), and server side rendering (SSR). The app is deployed to Vercel.

Demo

Check out the demo at: astro-supabase-vercel.vercel.app .

Limitations

• To improve security, the cookies for this app should be Secure and HttpOnly cookies.
• We don't handle automatic renewal of JWTs.
• Error handling is minimal

Development log

Todo

• Fix issue #4
• Proper error handling for expired JWTs
• Fix Secure and HttpOnly cookies

Done

• Add social media preview
• Add tailwind
• Build login screen
• Build register screen
• Add spinner for link
• Remove Supabase key from code
• Fix redirects after logout
• Add outline to README
• Common auth part for all sub pages
• Remove console.log()
• Clean up code
• Redirect after sign in
• Add 2 paragraphs of text per about page
• Minor
  • Fix margin bottom
  • Remove content on 2nd paragraph
  • Fix page titles

Notes and questions

• Can we set server side cookie AND redirect? - Yes
• https://docs.astro.build/en/guides/server-side-rendering/#astrorequestheaders
• npm install @astrojs/vercel
• Problems *<MyAuth client:only="react">

astro-supabase-vercel's Issues

URL change after magic link

Before accepting the Magic link via email, the URL was

https://astro-supabase-vercel.vercel.app/

but after, it changes to

https://astro-supabase-vercel-git-main-magnuswahlstrand.vercel.app/

🤔

You can access content which should be protected directly

You can go to https://astro-supabase-vercel.vercel.app/content/content-supabase etc.

Isn't this kind of defeating the purpose?

Doesn't persist login any more

Hi @magnuswahlstrand,
Sadly this demo no longer seems to work. After receiving the magic link, I then get redirected to the main page, but it still says 'user is not logged in' and tries to give me another magic link.

This is the same in Brave and Chrome, both on and off a VPN.

Any ideas? Thanks for a neat demo!

Update supabase to v2

There is a new auth methods.

Not working anymore

I tried this project myselft three weeks ago and it worked, but now it does not. What changed? Do you have any ideas?