Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix"); } } catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms"); } } catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links"); } } catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); } })(); (function(){ try { var __m = "youtube.com"; var __re = new RegExp('^' + "youtube\\.com" + '
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default"); } } catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers"); } } catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); } })(); (function(){ try { var __m = "*"; var __re = new RegExp('^' + ".*" + '
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode"); } } catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); } })(); })();
Skip to content

Login Setup - #8

Merged
orimcoding merged 8 commits into
mainfrom
login-setup
Apr 22, 2026
Merged

Login Setup#8
orimcoding merged 8 commits into
mainfrom
login-setup

Conversation

@orimcoding

@orimcodingorimcoding commented Apr 22, 2026

Copy link
Copy Markdown
Owner

Pull Request

Description

  • Functional Auth-Flow
  • Login/Logout & Home Page UI

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Refactoring (no functional changes)
  • Performance improvement
  • Other (please describe):

Related Issues

Screenshots (If it is a front end feature screenshot is reccomended)

Additional Notes

Summary by CodeRabbit

  • New Features

    • Login page and responsive login form with client-side validation and error display
    • Logout endpoints to end sessions
    • Dashboard page that greets signed-in users by email
  • Improvements

    • Home now acts as an auth gate with loading/redirect states
    • Authentication-aware routing to protect dashboard and redirect accordingly
    • Stronger environment variable validation with clearer errors

@orimcodingorimcoding self-assigned this Apr 22, 2026
@vercel

vercelBot commented Apr 22, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

ProjectDeploymentActionsUpdated (UTC)
swaleErrorErrorApr 22, 2026 10:44pm

@supabase

supabaseBot commented Apr 22, 2026

Copy link
Copy Markdown

This pull request has been ignored for the connected project isbbtnzupwefmhzojltw because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.


Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

@coderabbitai

coderabbitaiBot commented Apr 22, 2026

Copy link
Copy Markdown
Contributor

Warning

Rate limit exceeded

@orimcoding has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 11 minutes and 25 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 11 minutes and 25 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: e7734f95-7ffa-470e-a754-2c0aff6b73a9

📥 Commits

Reviewing files that changed from the base of the PR and between 5c03bf8 and 89e5fd9.

📒 Files selected for processing (2)
  • src/app/dashboard/page.tsx
  • src/app/page.tsx

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
📝 Walkthrough

Walkthrough

Adds a client-side login UI and form, a logout API route, server-rendered dashboard, middleware enforcing auth-based routing, and runtime validation for Supabase env vars in both client and server helpers. Home page now gates/redirects based on auth state.

Changes

Cohort / File(s)Summary
Auth API
src/app/api/auth/logout/route.ts
Adds GET and POST handlers that create a Supabase server client, call supabase.auth.signOut(), and return either a JSON success or a 302 redirect; errors yield 500 JSON.
Login UI & Components
src/components/auth/LoginForm.tsx, src/components/auth/LoginPageUI.tsx, src/app/auth/login/page.tsx, src/app/auth/layout.tsx
Introduces client login page and layout, a LoginPageUI composed with LoginForm that manages email/password state, posts to /api/auth/login, and navigates to /dashboard on success.
Pages: Home & Dashboard
src/app/page.tsx, src/app/dashboard/page.tsx
Home converted to a client auth gate using auth hook and router redirect to /dashboard; new server DashboardPage forces dynamic rendering and reads authenticated user via Supabase to display user email.
Supabase Helpers
src/lib/supabase/client.ts, src/lib/supabase/server.ts
Replace non-null assertions with runtime validation of Supabase env vars (NEXT_PUBLIC_SUPABASE_URL, NEXT_PUBLIC_SUPABASE_ANON_KEY / server equivalents) and throw descriptive errors when missing.
Routing Middleware
src/middleware.ts
Middleware now short-circuits when Supabase env vars are missing, otherwise uses Supabase getUser() to decide redirects: unauthenticated → / for /dashboard*, authenticated → /dashboard for / or /auth/*; removes env non-null assertions.

Sequence Diagram

sequenceDiagram
participant Browser as Browser/Client
participant Middleware as Middleware
participant Supabase as Supabase
participant App as App/Page/API
Browser->>Middleware: HTTP request (path)
rect rgba(100, 150, 200, 0.5)
Note over Middleware: Check Supabase env vars
alt Env vars missing
Middleware-->>Browser: NextResponse.next()
else Env vars present
Middleware->>Supabase: supabase.auth.getUser()
alt User retrieved
Supabase-->>Middleware: authUser
else Error / no user
Supabase-->>Middleware: error / null
end
end
end
rect rgba(150, 200, 150, 0.5)
Note over Middleware: Route decision
alt Unauthenticated && path starts with /dashboard
Middleware-->>Browser: Redirect to /
else Authenticated && (path == / or path starts with /auth/)
Middleware-->>Browser: Redirect to /dashboard
else
Middleware-->>App: Allow request to continue
App-->>Browser: Render or API response (e.g., logout, dashboard)
end
end
Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

  • Supabase Integration #5: Modifies Supabase integration and auth routes; overlaps with env var validation, middleware auth, and API route changes.

Poem

🐇 I nibbled bugs and hopped through code,
Logged out the users down the road,
With supabase checks and redirects bright,
Dashboards open in moonlit night,
Hooray — the auth flow's running right! ✨

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check nameStatusExplanationResolution
Docstring Coverage⚠️ WarningDocstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check❓ InconclusiveThe title 'Login Setup' is vague and generic. While it broadly relates to the authentication work, it fails to capture the specific, primary changes such as implementing login/logout flows, authentication gating, or the complete auth system architecture.Provide a more descriptive title that highlights the main implementation, such as 'Implement authentication flow with login/logout and home page redirect' or 'Add login UI and authentication-based routing'.
✅ Passed checks (3 passed)
Check nameStatusExplanation
Description Check✅ PassedCheck skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch login-setup

Comment @coderabbitai help to get the list of available commands and usage tips.

@orimcoding
orimcoding merged commit e62b105 into mainApr 22, 2026
5 of 8 checks passed
@orimcodingorimcoding mentioned this pull request Apr 22, 2026
@coderabbitaicoderabbitaiBot mentioned this pull request Jun 22, 2026
7 tasks
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@orimcoding