Quickstart

Setup your environment

Before you begin, make sure you have the following:

Prerequisites

A Strike account with API access - Your service role key - A development environment (Node.js, Python, Go, etc.)

Make your first request

Let’s start by testing the service with a simple health check:

curl -X GET "http://localhost:8080/health" \
  -H "Content-Type: application/json"

const response = await fetch("http://localhost:8080/health", {
  method: "GET",
  headers: {
    "Content-Type": "application/json",
  },
});

const data = await response.json();
console.log(data);

import requests

response = requests.get('http://localhost:8080/health')
data = response.json()
print(data)

package main

import (
    "fmt"
    "io"
    "net/http"
)

func main() {
    resp, err := http.Get("http://localhost:8080/health")
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    body, err := io.ReadAll(resp.Body)
    if err != nil {
        panic(err)
    }

    fmt.Println(string(body))
}

{
  "status": "healthy",
  "service": "supabase-auth-service",
  "version": "1.0.0",
  "timestamp": "2025-05-30T00:00:00Z"
}

Create your first user

Now let’s create a user account using the signup endpoint:

curl -X POST "http://localhost:8080/signup" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "password": "securepassword123"
  }'

const response = await fetch("http://localhost:8080/signup", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    email: "user@example.com",
    password: "securepassword123",
  }),
});

const user = await response.json();
console.log(user);

import requests

data = {
    "email": "user@example.com",
    "password": "securepassword123"
}

response = requests.post('http://localhost:8080/signup', json=data)
user = response.json()
print(user)

package main

import (
    "bytes"
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    data := map[string]string{
        "email":    "user@example.com",
        "password": "securepassword123",
    }

    jsonData, _ := json.Marshal(data)

    resp, err := http.Post(
        "http://localhost:8080/signup",
        "application/json",
        bytes.NewBuffer(jsonData),
    )
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    var user map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&user)
    fmt.Printf("%+v\n", user)
}

{
  "id": "123e4567-e89b-12d3-a456-426614174000",
  "aud": "authenticated",
  "role": "authenticated",
  "email": "user@example.com",
  "email_confirmed_at": null,
  "phone": null,
  "phone_confirmed_at": null,
  "last_sign_in_at": null,
  "app_metadata": {},
  "user_metadata": {},
  "created_at": "2023-01-01T00:00:00Z",
  "updated_at": "2023-01-01T00:00:00Z"
}

Authenticate a user

Once you have a user, you can authenticate them to get access tokens:

curl -X POST "http://localhost:8080/token?grant_type=password" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "password": "securepassword123"
  }'

const response = await fetch(
  "http://localhost:8080/token?grant_type=password",
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      email: "user@example.com",
      password: "securepassword123",
    }),
  }
);

const authData = await response.json();
console.log(authData);

import requests

data = {
    "email": "user@example.com",
    "password": "securepassword123"
}

response = requests.post(
    'http://localhost:8080/token?grant_type=password',
    json=data
)
auth_data = response.json()
print(auth_data)

package main

import (
    "bytes"
    "encoding/json"
    "fmt"
    "net/http"
)

func main() {
    data := map[string]string{
        "email":    "user@example.com",
        "password": "securepassword123",
    }

    jsonData, _ := json.Marshal(data)

    resp, err := http.Post(
        "http://localhost:8080/token?grant_type=password",
        "application/json",
        bytes.NewBuffer(jsonData),
    )
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    var authData map[string]interface{}
    json.NewDecoder(resp.Body).Decode(&authData)
    fmt.Printf("%+v\n", authData)
}

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "bearer",
  "expires_in": 3600,
  "expires_at": 1640995200,
  "refresh_token": "refresh_token_string",
  "user": {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "email": "user@example.com",
    "role": "authenticated"
  }
}

Make authenticated requests

Use the access token to make authenticated requests:

curl -X GET "http://localhost:8080/user" \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..." \
  -H "Content-Type: application/json"

const response = await fetch("http://localhost:8080/user", {
  method: "GET",
  headers: {
    Authorization: "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
    "Content-Type": "application/json",
  },
});

const user = await response.json();
console.log(user);

import requests

headers = {
    'Authorization': 'Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...',
    'Content-Type': 'application/json'
}

response = requests.get('http://localhost:8080/user', headers=headers)
user = response.json()
print(user)

package main

import (
    "fmt"
    "io"
    "net/http"
)

func main() {
    req, _ := http.NewRequest("GET", "http://localhost:8080/user", nil)
    req.Header.Set("Authorization", "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...")
    req.Header.Set("Content-Type", "application/json")

    client := &http.Client{}
    resp, err := client.Do(req)
    if err != nil {
        panic(err)
    }
    defer resp.Body.Close()

    body, _ := io.ReadAll(resp.Body)
    fmt.Println(string(body))
}

Admin Authentication

For admin users, use the enhanced admin login endpoint that includes privilege verification:

curl -X POST "http://localhost:8080/login-admin" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "admin@example.com",
    "password": "admin_password123"
  }'

const response = await fetch("http://localhost:8080/login-admin", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    email: "admin@example.com",
    password: "admin_password123",
  }),
});

const adminData = await response.json();
console.log("Admin details:", adminData.admin_details);

The admin login endpoint automatically verifies that the user has admin privileges in the database. Non-admin users will receive a 403 Forbidden response even with valid credentials.

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "bearer",
  "expires_in": 3600,
  "expires_at": 1640995200,
  "refresh_token": "refresh_token_string",
  "user": {
    "id": "26a20af0-109d-43e0-ae38-2e35148fff64",
    "email": "admin@example.com",
    "role": "authenticated"
  },
  "admin_details": {
    "id": "26a20af0-109d-43e0-ae38-2e35148fff64",
    "email": "admin@example.com",
    "is_admin": true,
    "created_at": "2023-01-01T00:00:00Z"
  }
}

Next Steps

Authentication Guide

Learn about different authentication methods and security best practices

User Management

Understand user lifecycle and profile management

API Reference

Explore all available endpoints and their parameters

Integration Guides

Step-by-step guides for common integration patterns

Get Started

Core Concepts

Guides

Setup your environment

Make your first request

Create your first user

Authenticate a user

Make authenticated requests

Admin Authentication

Next Steps

Authentication Guide

User Management

API Reference

Integration Guides

​Setup your environment

​Make your first request

​Create your first user

​Authenticate a user

​Make authenticated requests

​Admin Authentication

​Next Steps

Authentication Guide

User Management

API Reference

Integration Guides

Setup your environment

Make your first request

Create your first user

Authenticate a user

Make authenticated requests

Admin Authentication

Next Steps