Authentication

HOW IT IS WIRED

Real code from the GAS template

The excerpt below is lifted verbatim from services/auth.ts in the gas-template repository. This is the code your generated app gets, not pseudocode, not a description of intent.

// services/auth.ts — anonymous sign-in + account upgrade
export async function signInAnonymously(): Promise<{ userId: string }> {
  return retryWithBackoff(
    async () => {
      const { data, error } = await supabase.auth.signInAnonymously();
      if (error || !data.user) {
        throw new ServiceError('anon_signin_failed', 500, error?.message);
      }
      return { userId: data.user.id };
    },
    { shouldRetry: isTransientNon4xxError },
  );
}

export async function upgradeAnonymousAccount(
  credentials: UpgradeCredentials,
): Promise<UpgradeResult> {
  const { data: userData } = await supabase.auth.getUser();
  if (!userData.user?.is_anonymous) {
    throw new ServiceError('not_anonymous', 400, 'Not an anonymous account');
  }
  // Email path: updateUser; OAuth path: linkIdentity
  if ('email' in credentials) {
    const { error } = await supabase.auth.updateUser({
      email: credentials.email, password: credentials.password,
    });
    if (error) throw new ServiceError('upgrade_failed', 400, error.message);
  }
}

Source: goodspeed-apps/gas-template → services/auth.ts