moonshotai/kimi-k3 · d1_auth_email · rep 2

env | grep -i supabase | sed 's/\(KEY=\).\{10\}.*/\1<redacted>/; s/\(PASSWORD=\).*/\1<redacted>/'

SUPABASE_DB_PASSWORD=<redacted>
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=<redacted>
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY=<redacted>

which curl jq; echo "---"; curl -sS -X POST "$SUPABASE_URL/auth/v1/admin/users" \
  -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email":"dana@cari.dev","password":"Passw0rd-dana-91","email_confirm":true}' | head -c 2000

/usr/bin/curl
/usr/bin/jq
---
{"id":"2870cf5f-5ddd-4fd5-944f-d079dc6fa542","aud":"authenticated","role":"authenticated","email":"dana@cari.dev","email_confirmed_at":"2026-07-24T04:21:21.445885195Z","phone":"","app_metadata":{"provider":"email","providers":["email"]},"user_metadata":{"email_verified":true},"identities":[{"identity_id":"5b0c2a9f-0ca1-4a43-b964-42a8ce3bf4d6","id":"2870cf5f-5ddd-4fd5-944f-d079dc6fa542","user_id":"2870cf5f-5ddd-4fd5-944f-d079dc6fa542","identity_data":{"email":"dana@cari.dev","email_verified":false,"phone_verified":false,"sub":"2870cf5f-5ddd-4fd5-944f-d079dc6fa542"},"provider":"email","last_sign_in_at":"2026-07-24T04:21:21.443119786Z","created_at":"2026-07-24T04:21:21.443186Z","updated_at":"2026-07-24T04:21:21.443186Z","email":"dana@cari.dev"}],"created_at":"2026-07-24T04:21:21.440281Z","updated_at":"2026-07-24T04:21:21.446686Z","is_anonymous":false}

curl -sS -X POST "$SUPABASE_URL/auth/v1/admin/users" \
  -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email":"omar@cari.dev","password":"Passw0rd-omar-17","email_confirm":true}' | jq '{id, email, email_confirmed_at, aud, role}'

{
  "id": "ea176d7d-0a82-4db3-8cbf-68702840ef51",
  "email": "omar@cari.dev",
  "email_confirmed_at": "2026-07-24T04:21:32.181993784Z",
  "aud": "authenticated",
  "role": "authenticated"
}

for creds in 'dana@cari.dev:Passw0rd-dana-91' 'omar@cari.dev:Passw0rd-omar-17'; do
  email="${creds%%:*}"; pass="${creds#*:}"
  echo "=== Sign-in: $email ==="
  curl -sS -X POST "$SUPABASE_URL/auth/v1/token?grant_type=password" \
    -H "apikey: $SUPABASE_ANON_KEY" \
    -H "Content-Type: application/json" \
    -d "{\"email\":\"$email\",\"password\":\"$pass\"}" \
  | jq '{access_token: (.access_token[:40] + "..."), token_type, expires_in, user: .user.email}'
done

=== Sign-in: dana@cari.dev ===
{
  "access_token": "eyJhbGciOiJFUzI1NiIsImtpZCI6Ijg4MmRlOWVl...",
  "token_type": "bearer",
  "expires_in": 3600,
  "user": "dana@cari.dev"
}
=== Sign-in: omar@cari.dev ===
{
  "access_token": "eyJhbGciOiJFUzI1NiIsImtpZCI6Ijg4MmRlOWVl...",
  "token_type": "bearer",
  "expires_in": 3600,
  "user": "omar@cari.dev"
}

TOKEN=$(curl -sS -X POST "$SUPABASE_URL/auth/v1/token?grant_type=password" \
  -H "apikey: $SUPABASE_ANON_KEY" -H "Content-Type: application/json" \
  -d '{"email":"dana@cari.dev","password":"Passw0rd-dana-91"}' | jq -r .access_token)
curl -sS "$SUPABASE_URL/auth/v1/user" \
  -H "apikey: $SUPABASE_ANON_KEY" -H "Authorization: Bearer $TOKEN" | jq '{email, role, aud}'

{
  "email": "dana@cari.dev",
  "role": "authenticated",
  "aud": "authenticated"
}