feat(auth): offer email/password sign-in alongside Google [SIDE-133] - #6

Merged

ben-everly merged 132 commits into

mainfrom

SIDE-133/offer-emailpassword-sign-in-alongside-google

Jul 2, 2026

Commits on Jun 19, 2026

feat(auth): enable Supabase email provider for password sign-in
ben-everly
committed
fda7d53
feat(auth): suppress profile-drift log for password sign-ups
ben-everly
committed
5f84a17
feat(auth): add Zod schemas for email/password forms
ben-everly
committed
d0129fb
test(auth): cover reset password length and mismatch paths
ben-everly
committed
ef440b8
feat(auth): map GoTrue error codes to friendly copy
ben-everly
committed
904998c
fix(auth): make existing-email copy non-enumerating, export AuthErrorLike
ben-everly
committed
9b59d73
feat(auth): add recovery_invalid notice for expired reset links
ben-everly
committed
5d3867d
feat(auth): make register/forgot/reset routes public
ben-everly
committed
36b3fba
feat(auth): route recovery-link failures to forgot-password
ben-everly
committed
27dbc54
feat(auth): add email/password sign-in form to /login
ben-everly
committed
53ad72e
fix(auth): drop as-const on refine path to satisfy Zod's PropertyKey[]
ben-everly
committed
d06d567
fix(auth): firm up sign-in success test and link field errors for a11y
ben-everly
committed
29edde1
feat(auth): add /register page and sign-up form
ben-everly
committed
185bbc9
fix(auth): robust register success test and consistent error ids
ben-everly
committed
c8e983d
feat(auth): add /forgot-password page and request form
ben-everly
committed
6ed5064
feat(auth): add /reset-password page and form
ben-everly
committed
e834cad
test(auth): assert router.refresh on reset-password success
ben-everly
committed
db0eb7c
test(auth): e2e for email/password sign-up, sign-in, and reset
ben-everly
committed
a95eb16
chore(auth): apply prettier formatting and ignore SDD scratch dir
ben-everly
committed
17fd78b
fix(auth): harden reset-password session check and clarify config comment
ben-everly
committed
35dfe00
test(auth): guard non-enumerating duplicate signup; fix inverted comment
ben-everly
committed
23b477e
feat(auth): add forgot-password link to the register page
ben-everly
committed
9b664c1
docs(auth): note the reset-password session gate is UX-only
ben-everly
committed
d040ab0
docs(auth): explain why sign-in/register leave pending set on success
ben-everly
committed
2806be5
docs(deploy): add auth hardening checklist for production
ben-everly
committed
17d861b
docs(deploy): drop captcha from checklist (needs client work, tracked separately)
ben-everly
committed
58cc76c
feat(auth): bounce a dead recovery session to forgot-password on reset
ben-everly
committed
343c5d6

Commits on Jun 20, 2026

Commits on Jun 21, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 24, 2026

Commits on Jun 25, 2026

Commits on Jun 26, 2026

refactor(ui): drop spinner comment re-describing a standard role
ben-everly
committed
1cd3560

Commits on Jun 27, 2026

Commits on Jun 28, 2026

Commits on Jun 29, 2026

Commits on Jun 30, 2026