Use PKCE flow for Supabase OAuth

↗ view on GitHub · andrew · 2026-05-05 · 37d9bbda

Default supabase-js v2 browser flow is implicit (token in URL fragment),
which doesn't match the /auth/callback handler that exchanges a query-string
code. Switching to PKCE makes the flow explicit and more secure.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Repository easterbrooka/mike
Author andrew <andrew@wrmk.co.nz>
Authored
Parents 97c30c22
Stats 1 file changed , +3 , -1
Part of Microsoft Entra SSO and system-level LLM key fallback

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-37d9bbda.md from inside the repo you want the change in.

⬇ Download capture-commit-37d9bbda.md