Social Authentication

<BlockPreview name="social-auth/auth/login" /> <Callout className="mt-4"> The block is using GitHub provider by default, but can be easily switched by changing a single parameter. </Callout>

Installation

Folder structure

This block includes the Supabase client. If you already have one installed, you can skip overwriting it.

Usage

Once you install the block in your Tanstack Start project, you'll get all the necessary pages and components to set up a social authentication flow.

Getting started

After installing the block, you'll have the following environment variables in your .env.local file:

env

VITE_SUPABASE_URL=
VITE_SUPABASE_PUBLISHABLE_KEY=

If you're using supabase.com, you can find these values in the Connect modal under App Frameworks or in your project's API settings.
If you're using a local instance of Supabase, you can find these values by running supabase start or supabase status (if you already have it running).

Setting up third party providers

We support a wide variety of social providers that you can use to integrate with your application. The full list is available here. This block uses the PKCE flow with GitHub as the provider. To switch providers, just update the provider field in the supabase.auth.signInWithOAuth call. Enable the provider you want to use under Auth Providers in the Supabase Dashboard and add the necessary credentials.

Setting up routes and redirect URLs

Set the site URL in the URL Configuration settings in the Supabase Dashboard.
Update the redirect paths in login-form.tsx to point to your app’s logged-in routes. Our examples use /protected, but you can set this to whatever fits your app.
Visit http://your-site-url/login to see this component in action.

If you want to combine this block with the password-based auth, you need to:

Copy the handleSocialLogin function into the password-based login-form.tsx component and bind it to a "Login with ..." button.
Copy the @/routes/auth/oauth.ts in your app under the same route.