AuthSupabase · Clerk13 min read

Auth: sessions, tokens and providers

What a session actually is, cookies versus tokens, JWTs without the mystique, the OAuth redirect dance, protecting server code properly, and how identity reaches your database's row policies.

What this one covers

·The actual problem
·Cookies, properly configured
·JWTs, demystified
·The OAuth dance
·Protecting routes and server actions
·How identity reaches your row policies
·Choosing one

Subscription

The Library

Everything running a software business asks of you and none of it is code: onboarding that activates, churn you can actually see coming, marketing with no budget, SEO that finds buyers, and the AI-plus-Ahrefs workflow for writing the blog that feeds it. One new playbook a week, plus the whole archive from day one.

$9/ month · cancel any time

✓A new playbook every week — onboarding, churn, growth, SEO, content
✓The full back catalogue the moment you join, not drip-fed
✓Vendor explainers: Stripe, Supabase, Resend, Vercel, the AI APIs
✓The research shelf — real papers, decoded, on learning and on LLMs
✓One email when a new one lands, off by default in one click
✓Cancel any time; you keep reading to the end of the month

first — it takes ten seconds.

Billed monthly through Whop's secure checkout · cancel from Settings any time. See all plans →