tachysx

Expo Supabase Social Auth — AI skill for Claude Code

AI community

Sign in with Apple + Google for Expo and Supabase (iOS, Android, web): a tested playbook for you or your AI agent, with templates and scripts.

How to install Expo Supabase Social Auth

This entry records only its repository, not the path inside it, so there is no exact command to give. Open tachysx/expo-supabase-social-auth and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Expo Supabase Social Auth does

Sign in with Apple + Google for Expo and Supabase (iOS, Android, web): a tested playbook for you or your AI agent, with templates and scripts.

Alternatives in AI

Guizang Ppt Skill — AI-agent Skill for generating polished HTML slide decks: editorial magazine and Swiss layouts, image prompts 24.9k ★
LaTeX Document Skill — Universal LaTeX document skill for Claude Code: 27 templates, 27 scripts, 26 reference guides 725 ★
Openclaw Dashboard — 🔐 Secure, real-time monitoring dashboard for OpenClaw AI agents 654 ★

README

Sign in with Apple + Google for Expo and Supabase

A complete, tested path to **Sign in with Apple** and **Sign in with Google** in an Expo (React Native) app that uses **Supabase Auth**. It covers iOS, Android and the web build, and you can run it yourself or hand it to an AI coding agent (Claude Code, Codex, Cursor, …).

It isn't a library. It's the playbook, the code templates and the check scripts from shipping this in a real production app. That includes every console setting that silently breaks sign-in when it's wrong, the App Store rules that get apps rejected, and the checks that prove each step worked.

	iOS app	Android app	Web (react-native-web)
Sign in with Apple	Native sheet	–	Supabase redirect
Sign in with Google	Native sheet	Native account picker	Supabase redirect

What's covered

Console setup:
- Google Cloud: consent screen, plus web, Android (×2) and iOS clients.
- Apple Developer: the App ID capability, the Sign in with Apple key, a Services ID for web, and email relay.
Supabase Auth config: provider settings, client ID order, nonce and the redirect allow list, applied by a script.
App code:
- Native ID-token sign-in, including the nonce and the Apple name that's only sent once.
- A web redirect flow, with the native module kept out of the web bundle.
- Buttons that follow Apple's and Google's rules.
Consent: social sign-ups skip your email form, so they get the consent step (GDPR, PDPA and so on) at the start of onboarding.
Account deletion: revokes the user's Apple token, as App Store guideline 5.1.1(v) requires.
Web: Apple's web client secret expires every 6 months, and a script renews it. Plus how to test on a preview deploy.
Shipping:
- The first build after enabling the capability.
- Why an OTA update can crash older builds.
- What App Review checks.
Troubleshooting, indexed by symptom.