user-feedback: prefer Management API for auth provider configuration

Open Beginner friendly
#233 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
72/100
Issue type
Documentation
Clarity
Clearly specified
Activity status
Quiet
Tech stack
supabase
Domain
documentation

Research direction

Start in SKILL.md sections “Supabase CLI” and “Supabase Documentation”; inspect the installed CLI with --help and consult the current Supabase Management API provider documentation. Done means the guidance prefers an API or CLI write when authorized credentials are available, uses dashboard steps only when needed, and verifies provider state without exposing secrets.

Written by the indexing model from the issue text.

Description

What happened

Task: Configure Sign in with Apple for a Supabase-backed native macOS app that also ships a Developer ID build using Apple web OAuth.

Skill said: The skill requires current documentation and CLI discovery, but it does not explicitly route hosted Auth provider configuration through the Supabase Management API when an access token and project reference are already available. This allowed the workflow to default too early to manual dashboard instructions.

Expected: For hosted Auth provider settings, first inspect the installed CLI and current provider documentation, then prefer a repeatable Management API or CLI write when credentials are available. Reserve dashboard instructions for operations the API and CLI do not expose. Verification should read back the live provider configuration without printing secrets.

Source

File: SKILL.md

Section: Supabase CLI and Supabase Documentation

Fix suggestion

Add an API-first routing rule for project configuration: discover CLI support with --help; if the CLI lacks the required hosted setting, check current Management API documentation and use it when the user has authorized credentials. For social-auth providers, read back enabled state, client IDs, callback host, and secret presence in redacted form. Use dashboard steps only for unsupported operations.

Dominant language
TypeScript
Stars
2.6k
Forks
208
PR merge metrics
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from supabase/agent-skills

All issues in supabase/agent-skills

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.