Add auth flow checklist for Supabase + Next.js password reset

[ahorn720]

Summary

• Adds an "Auth Flow Checklist" section to the Supabase Postgres best practices skill
• Covers the full password reset flow: forgot-password UI, /reset-password page, middleware exclusion, nav exclusion
• Explains how Supabase password reset works under the hood (magic link → hash fragments → PASSWORD_RECOVERY event)

Motivation

When building email/password auth with Supabase, it's easy to ship a login page and forget the password reset flow — leaving users locked out. This checklist ensures agents implementing auth always include self-service recovery.

Test plan

• Install the updated skill and verify Claude references the checklist when implementing auth
• Confirm the section renders correctly in SKILL.md

🤖 Generated with Claude Code

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Cache: Disabled due to Reviews > Disable Cache setting

Disabled knowledge base sources:

• Linear integration is disabled

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 760460c and 8bc9a16.

📒 Files selected for processing (1)

• skills/supabase-postgres-best-practices/SKILL.md

---

📝 Walkthrough

Summary by CodeRabbit

• Documentation
  • Added comprehensive Auth Flow Checklist documentation for implementing password reset flows in Supabase + Next.js projects. Covers email-based password recovery workflows, login page enhancements with "Forgot password?" functionality, dedicated password recovery pages, middleware configuration, and authentication state management. Includes reference links for implementation guidance.

Walkthrough

This change adds a new Auth Flow Checklist section to the SKILL.md document in the Supabase Postgres Best Practices skill directory. The addition documents a password-reset authentication flow for Supabase with Next.js, covering login page enhancements with a "Forgot password?" option, implementation of a /reset-password client component handling password recovery events, middleware and navigation configuration adjustments, and the underlying reset workflow mechanics including resetPasswordForEmail, token verification, and onAuthStateChange handling. Reference links are included for additional context. The change adds 24 lines of documentation content.

Tip

Try Coding Plans. Let us write the prompt for your AI agent so you can ship faster (with fewer bugs).
Share your feedback on Discord.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}