Auth Configuration

Supabase Auth providers, URLs, and profile bootstrap.

Supabase Auth handles identity. Application profiles in hub_profiles are created on first sign-in.

Providers

Google — recommended for the FSH team
Email — magic link (rate-limited on built-in SMTP)
Dev bypass — local only, not a Supabase provider

URL configuration

bash

# Redirect URLs (add both to Supabase dashboard)
http://localhost:3010/auth/callback
https://fsh-creative-hub.vercel.app/auth/callback

Profiles bootstrap

On first login, a row is inserted into hub_profiles with display name and avatar from the OAuth provider. Hub admin flag is set via migration 015 for org-wide access.