tencent/hy3 · d1_auth_email · rep 2

env | grep -i supabase; echo "---"; which curl jq psql; echo "---"; curl --version | head -1

SUPABASE_DB_PASSWORD=<redacted:SUPABASE_DB_PASSWORD>
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=<redacted:SUPABASE_SERVICE_ROLE_KEY>
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY=<redacted:SUPABASE_ANON_KEY>
---
/usr/bin/curl
/usr/bin/jq
/usr/bin/psql
---
curl 7.88.1 (x86_64-pc-linux-gnu) libcurl/7.88.1 OpenSSL/3.0.20 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 (+libidn2/2.3.3) libssh2/1.10.0 nghttp2/1.52.0 librtmp/2.3 OpenLDAP/2.5.13

set -e
BASE="${SUPABASE_URL}"
SRK="${SUPABASE_SERVICE_ROLE_KEY}"

create_user () {
  local email="$1" pass="$2"
  echo "=== Creating $email ==="
  curl -sS -X POST "$BASE/auth/v1/admin/users" \
    -H "Authorization: Bearer $SRK" \
    -H "apikey: $SRK" \
    -H "Content-Type: application/json" \
    -d "{\"email\":\"$email\",\"password\":\"$pass\",\"email_confirm\":true}" \
    | jq '{id,email,email_confirmed_at,confirmed_at,created_at,last_sign_in_at}'
}

create_user "dana@cari.dev" "Passw0rd-dana-91"
create_user "omar@cari.dev" "Passw0rd-omar-17"

=== Creating dana@cari.dev ===
{
  "id": "6eb5b438-4068-47a6-99c5-eeec0609022d",
  "email": "dana@cari.dev",
  "email_confirmed_at": "2026-07-26T01:30:02.985415336Z",
  "confirmed_at": null,
  "created_at": "2026-07-26T01:30:02.848838Z",
  "last_sign_in_at": null
}
=== Creating omar@cari.dev ===
{
  "id": "2b403e39-ba76-4750-b981-ecbda7b88540",
  "email": "omar@cari.dev",
  "email_confirmed_at": "2026-07-26T01:30:03.740776796Z",
  "confirmed_at": null,
  "created_at": "2026-07-26T01:30:03.729906Z",
  "last_sign_in_at": null
}

set -e
BASE="${SUPABASE_URL}"
ANK="${SUPABASE_ANON_KEY}"

sign_in () {
  local email="$1" pass="$2" name="$3"
  echo "=== Sign-in attempt for $name ($email) ==="
  RESP=$(curl -sS -X POST "$BASE/auth/v1/token?grant_type=password" \
    -H "apikey: $ANK" \
    -H "Content-Type: application/json" \
    -H "Authorization: Bearer $ANK" \
    -d "{\"email\":\"$email\",\"password\":\"$pass\"}")
  echo "$RESP" | jq '{
    access_token_present: (.access_token != null),
    token_type,
    expires_in,
    refresh_token_present: (.refresh_token != null),
    user_id: (.user.id),
    user_email: (.user.email),
    user_email_confirmed: (.user.email_confirmed_at != null)
  }'
  # validate the access token decodes & has exp
  TOK=$(echo "$RESP" | jq -r '.access_token')
  echo "Access token prefix: ${TOK:0:20}..."
}

sign_in "dana@cari.dev" "Passw0rd-dana-91" "dana"
sign_in "omar@cari.dev" "Passw0rd-omar-17" "omar"

=== Sign-in attempt for dana (dana@cari.dev) ===
{
  "access_token_present": true,
  "token_type": "bearer",
  "expires_in": 3600,
  "refresh_token_present": true,
  "user_id": "6eb5b438-4068-47a6-99c5-eeec0609022d",
  "user_email": "dana@cari.dev",
  "user_email_confirmed": true
}
Access token prefix: eyJhbGciOiJFUzI1NiIs...
=== Sign-in attempt for omar (omar@cari.dev) ===
{
  "access_token_present": true,
  "token_type": "bearer",
  "expires_in": 3600,
  "refresh_token_present": true,
  "user_id": "2b403e39-ba76-4750-b981-ecbda7b88540",
  "user_email": "omar@cari.dev",
  "user_email_confirmed": true
}
Access token prefix: eyJhbGciOiJFUzI1NiIs...

set -e
BASE="${SUPABASE_URL}"
ANK="${SUPABASE_ANON_KEY}"

get_tok () {
  curl -sS -X POST "$BASE/auth/v1/token?grant_type=password" \
    -H "apikey: $ANK" -H "Content-Type: application/json" -H "Authorization: Bearer $ANK" \
    -d "{\"email\":\"$1\",\"password\":\"$2\"}" | jq -r '.access_token'
}

check () {
  local email="$1" pass="$2" name="$3"
  TOK=$(get_tok "$email" "$pass")
  echo "=== Validate session for $name via /auth/v1/user ==="
  curl -sS "$BASE/auth/v1/user" \
    -H "apikey: $ANK" \
    -H "Authorization: Bearer $TOK" \
    | jq '{id, email, email_confirmed_at, aud, role}'
}

check "dana@cari.dev" "Passw0rd-dana-91" "dana"
check "omar@cari.dev" "Passw0rd-omar-17" "omar"

=== Validate session for dana via /auth/v1/user ===
{
  "id": "6eb5b438-4068-47a6-99c5-eeec0609022d",
  "email": "dana@cari.dev",
  "email_confirmed_at": "2026-07-26T01:30:02.985415Z",
  "aud": "authenticated",
  "role": "authenticated"
}
=== Validate session for omar via /auth/v1/user ===
{
  "id": "2b403e39-ba76-4750-b981-ecbda7b88540",
  "email": "omar@cari.dev",
  "email_confirmed_at": "2026-07-26T01:30:03.740776Z",
  "aud": "authenticated",
  "role": "authenticated"
}