Authentication

8Space uses Supabase Auth for user authentication, supporting email/password and OAuth (Google) sign-in.

Client Setup

The Supabase client is initialized with auto-refresh and session persistence:

packages/app/src/integrations/supabase/client.ts

import { createClient } from '@supabase/supabase-js';

const supabaseUrl = import.meta.env.VITE_SUPABASE_URL;
const supabaseAnonKey = import.meta.env.VITE_SUPABASE_ANON_KEY;

export const supabase = createClient(supabaseUrl, supabaseAnonKey, {
  auth: {
    autoRefreshToken: true,
    persistSession: true,
    detectSessionInUrl: true,
  },
});

Create a new user account with email and password.

const { data, error } = await supabase.auth.signUp({
  email: 'user@example.com',
  password: 'securePassword123',
  options: {
    data: {
      name: 'John Doe'
    }
  }
});

curl -X POST 'https://your-project.supabase.co/auth/v1/signup' \
  -H 'Content-Type: application/json' \
  -H 'apikey: YOUR_ANON_KEY' \
  -d '{
    "email": "user@example.com",
    "password": "securePassword123",
    "options": {
      "data": {
        "name": "John Doe"
      }
    }
  }'

Request Body

string

required

User email address

string

required

User password (minimum 6 characters)

object

User metadata

Show properties

string

Display name for the user

Response

string

JWT access token

string

Refresh token for obtaining new access tokens

integer

Token expiration time in seconds

string

Token type (bearer)

object

User object

Show properties

string

User UUID

string

User email address

object

Custom user metadata including name

Authenticate with email and password.

const { data, error } = await supabase.auth.signInWithPassword({
  email: 'user@example.com',
  password: 'securePassword123',
});

curl -X POST 'https://your-project.supabase.co/auth/v1/token?grant_type=password' \
  -H 'Content-Type: application/json' \
  -H 'apikey: YOUR_ANON_KEY' \
  -d '{
    "email": "user@example.com",
    "password": "securePassword123"
  }'

Request Body

string

required

User email address

string

required

User password

Response

string

JWT access token for API requests

string

Token for refreshing the session

integer

Seconds until token expiration

object

Authenticated user object with id and email

Initiate Google OAuth sign-in flow.

TypeScript

const { data, error } = await supabase.auth.signInWithOAuth({
  provider: 'google',
  options: {
    redirectTo: 'https://8space.app/auth/callback'
  }
});

// Redirects to Google OAuth consent screen
// After approval, redirects to callback URL with auth code

Parameters

string

required

OAuth provider (google)

string

URL to redirect after authentication

Get Current User

Retrieve the authenticated user’s information.

const { data: { user }, error } = await supabase.auth.getUser();

curl -X GET 'https://your-project.supabase.co/auth/v1/user' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Response

string

User UUID

string

User email address

object

Custom metadata including display name

object

System metadata managed by Supabase

Sign Out

End the current user session.

const { error } = await supabase.auth.signOut();

curl -X POST 'https://your-project.supabase.co/auth/v1/logout' \
  -H 'apikey: YOUR_ANON_KEY' \
  -H 'Authorization: Bearer YOUR_ACCESS_TOKEN'

Response

Returns empty response with status 200 on success.

Error Handling

All authentication endpoints return errors in this format:

string

Human-readable error message

string

Error code identifier

string | null

Additional error details

string | null

Suggestion for resolving the error

Security

All authenticated endpoints require these headers:

apikey: Supabase anon/service key
Authorization: Bearer token with JWT access token

Example

const headers = {
  'apikey': import.meta.env.VITE_SUPABASE_ANON_KEY,
  'Authorization': `Bearer ${session.access_token}`
};

Overview

Landing API

Supabase API

Authentication

Client Setup

Request Body

Response

Request Body

Response

Parameters

Get Current User

Response

Sign Out

Response

Error Handling

Security

​Client Setup

​Sign Up

​Request Body

​Response

​Sign In with Password

​Request Body

​Response

​Sign In with OAuth

​Parameters

​Get Current User

​Response

​Sign Out

​Response

​Error Handling

​Security

Client Setup

Sign Up

Request Body

Response

Sign In with Password

Request Body

Response

Sign In with OAuth

Parameters

Get Current User

Response

Sign Out

Response

Error Handling

Security