Integrating

Client side, point a Supabase-compatible SDK at your project’s auth endpoint:

import { createClient } from '@supabase/supabase-js';
const auth = createClient(process.env.AUTH_URL, process.env.AUTH_ANON_KEY);
await auth.auth.signInWithPassword({ email, password });

Server side, verify JWTs against the JWKS endpoint:

import { createRemoteJWKSet, jwtVerify } from 'jose';
const jwks = createRemoteJWKSet(new URL(`${process.env.AUTH_URL}/.well-known/jwks.json`));
const { payload } = await jwtVerify(token, jwks);

Management

Users, roles, sessions, and the audit log live in My Impulse and the Auth API 1.0 — including credential rotation that never exposes signing secrets.