Authentication
Login, signup, password reset, roles, protected routes and user management.
Everything about letting people log in — and making sure the wrong people cannot.

Guides in Authentication
How to Add User Roles and Permissions
Admin, editor and member roles done safely — stored separately from user profiles so they cannot be escalated.
How to Create Protected Pages
Restrict routes to signed-in users properly — including the server-side check most AI-generated guards miss.
How to Add User Login to a Lovable Project
Sign-up, sign-in, sign-out and sessions — plus the settings people forget that break login on the live site.
Prompts for this topic
Add Authentication With Email and Google
Sign-up, sign-in, sign-out, session handling and protected routes in one pass.
Copy this prompt →Add Role-Based User Permissions
Creates a safe role system stored in its own table, with a role-check function used by your access rules and server actions.
Copy this prompt →Useful external references
- Supabase Auth Documentation
Supabase · Reference for sign-in methods, sessions, and server-side verification.