Creative Hub

Local Auth

Dev bypass, Google OAuth, and middleware route guards.

Authentication is handled by Supabase Auth with session cookies refreshed in Next.js middleware on every request.

Dev bypass

When DEV_AUTH_BYPASS=true, the login page shows a skip button that creates a session via /auth/dev-bypass.

Google OAuth

Configure in Supabase → Authentication → Providers → Google.

Redirect URLs must include:

bash
http://localhost:3010/auth/callback
https://fsh-creative-hub.vercel.app/auth/callback
Login page with Google sign-in
Login page — Google OAuth and dev skip

Middleware guards

Public routes (no session required):

  • / and /landing
  • /login and /auth/*
  • /share/[token]
  • /docs (this documentation)

All other routes redirect unauthenticated users to login with a next param.