moonshotai/kimi-k3 · d1_auth_email · rep 1

env | grep -i supabase | sed 's/\(KEY=\).\{10\}.*/\1<redacted>/; s/\(PASSWORD=\).*/\1<redacted>/' && which curl jq psql 2>/dev/null

SUPABASE_DB_PASSWORD=<redacted>
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=<redacted>
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY=<redacted>
/usr/bin/curl
/usr/bin/jq
/usr/bin/psql

set -e
create_user() {
  local email="$1" pass="$2"
  curl -sS -X POST "$SUPABASE_URL/auth/v1/admin/users" \
    -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
    -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
    -H "Content-Type: application/json" \
    -d "{\"email\":\"$email\",\"password\":\"$pass\",\"email_confirm\":true}"
}
echo "== create dana =="
create_user "dana@cari.dev" "Passw0rd-dana-91" | jq '{id, email, email_confirmed_at, created_at, error: .msg}'
echo "== create omar =="
create_user "omar@cari.dev" "Passw0rd-omar-17" | jq '{id, email, email_confirmed_at, created_at, error: .msg}'

== create dana ==
{
  "id": "d4ea8b49-bd75-4955-87f9-f0a08f55e248",
  "email": "dana@cari.dev",
  "email_confirmed_at": "2026-07-24T04:19:55.508671944Z",
  "created_at": "2026-07-24T04:19:55.500226Z",
  "error": null
}
== create omar ==
{
  "id": "9b7d0dd2-9343-41d7-bfd3-f8c0dae0efb2",
  "email": "omar@cari.dev",
  "email_confirmed_at": "2026-07-24T04:19:55.936775041Z",
  "created_at": "2026-07-24T04:19:55.934232Z",
  "error": null
}

set -e
signin() {
  local email="$1" pass="$2"
  resp=$(curl -sS -X POST "$SUPABASE_URL/auth/v1/token?grant_type=password" \
    -H "apikey: $SUPABASE_ANON_KEY" \
    -H "Content-Type: application/json" \
    -d "{\"email\":\"$email\",\"password\":\"$pass\"}")
  at=$(echo "$resp" | jq -r '.access_token // empty')
  if [ -n "$at" ]; then
    echo "OK  $email -> access_token issued (len=${#at}), user_id=$(echo "$resp" | jq -r '.user.id'), expires_in=$(echo "$resp" | jq -r '.expires_in')s, token_type=$(echo "$resp" | jq -r '.token_type')"
  else
    echo "FAIL $email -> $(echo "$resp" | jq -c '{error, error_description, msg}')"
    exit 1
  fi
}
signin "dana@cari.dev" "Passw0rd-dana-91"
signin "omar@cari.dev" "Passw0rd-omar-17"

OK  dana@cari.dev -> access_token issued (len=790), user_id=d4ea8b49-bd75-4955-87f9-f0a08f55e248, expires_in=3600s, token_type=bearer
OK  omar@cari.dev -> access_token issued (len=790), user_id=9b7d0dd2-9343-41d7-bfd3-f8c0dae0efb2, expires_in=3600s, token_type=bearer

set -e
resp=$(curl -sS -X POST "$SUPABASE_URL/auth/v1/token?grant_type=password" \
  -H "apikey: $SUPABASE_ANON_KEY" -H "Content-Type: application/json" \
  -d '{"email":"omar@cari.dev","password":"Passw0rd-omar-17"}')
at=$(echo "$resp" | jq -r '.access_token')
curl -sS "$SUPABASE_URL/auth/v1/user" \
  -H "apikey: $SUPABASE_ANON_KEY" -H "Authorization: Bearer $at" | jq '{id, email, role, aud}'

{
  "id": "9b7d0dd2-9343-41d7-bfd3-f8c0dae0efb2",
  "email": "omar@cari.dev",
  "role": "authenticated",
  "aud": "authenticated"
}