Setup your environment Before you begin, make sure you have the following:
A Strike account with API access - Your service role key - A development
environment (Node.js, Python, Go, etc.)
Make your first request Let’s start by testing the service with a simple health check:
curl -X GET "http://localhost:8080/health" \ -H "Content-Type: application/json"
{ "status" : "healthy" , "service" : "supabase-auth-service" , "version" : "1.0.0" , "timestamp" : "2025-05-30T00:00:00Z" } Create your first user Now let’s create a user account using the signup endpoint:
curl -X POST "http://localhost:8080/signup" \ -H "Content-Type: application/json" \ -d '{ "email": "user@example.com", "password": "securepassword123" }'
{ "id" : "123e4567-e89b-12d3-a456-426614174000" , "aud" : "authenticated" , "role" : "authenticated" , "email" : "user@example.com" , "email_confirmed_at" : null , "phone" : null , "phone_confirmed_at" : null , "last_sign_in_at" : null , "app_metadata" : {}, "user_metadata" : {}, "created_at" : "2023-01-01T00:00:00Z" , "updated_at" : "2023-01-01T00:00:00Z" } Authenticate a user Once you have a user, you can authenticate them to get access tokens:
curl -X POST "http://localhost:8080/token?grant_type=password" \ -H "Content-Type: application/json" \ -d '{ "email": "user@example.com", "password": "securepassword123" }'
{ "access_token" : "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." , "token_type" : "bearer" , "expires_in" : 3600 , "expires_at" : 1640995200 , "refresh_token" : "refresh_token_string" , "user" : { "id" : "123e4567-e89b-12d3-a456-426614174000" , "email" : "user@example.com" , "role" : "authenticated" } } Make authenticated requests Use the access token to make authenticated requests:
curl -X GET "http://localhost:8080/user" \ -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." \ -H "Content-Type: application/json"
Admin Authentication For admin users, use the enhanced admin login endpoint that includes privilege verification:
curl -X POST "http://localhost:8080/login-admin" \ -H "Content-Type: application/json" \ -d '{ "email": "admin@example.com", "password": "admin_password123" }'
The admin login endpoint automatically verifies that the user has admin
privileges in the database. Non-admin users will receive a 403 Forbidden
response even with valid credentials.
{ "access_token" : "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." , "token_type" : "bearer" , "expires_in" : 3600 , "expires_at" : 1640995200 , "refresh_token" : "refresh_token_string" , "user" : { "id" : "26a20af0-109d-43e0-ae38-2e35148fff64" , "email" : "admin@example.com" , "role" : "authenticated" }, "admin_details" : { "id" : "26a20af0-109d-43e0-ae38-2e35148fff64" , "email" : "admin@example.com" , "is_admin" : true , "created_at" : "2023-01-01T00:00:00Z" } } Next Steps 
