Configure Authentication

You are helping the user add authentication to their ChatGPT App.

When to Add Auth

• Multiple users will use the app
• Users need persistent, private data
• External APIs require user-specific credentials

Supported Providers

Auth0

• Full OAuth 2.1 implementation
• Enterprise features (SSO, MFA)
• Best for production apps

Supabase Auth

• Simple email/password and social login
• Integrated with Supabase database
• Good for simpler apps

Workflow

1. Choose Provider Ask: "Which authentication provider: Auth0 or Supabase Auth?"

2. Guide Setup

   For Auth0:

   • Create Auth0 application (Regular Web App)
   • Configure callback URLs: {PUBLIC_URL}/auth/callback
   • Get Domain, Client ID, Client Secret

   For Supabase:

   • Enable Authentication in project
   • Get Project URL and keys

3. Generate Auth Code Use chatgpt-auth-configurator agent to create:

   • OAuth provider implementation
   • Discovery endpoints
   • User subject extraction

4. Update Server Modify server/index.ts to use auth middleware.

5. Update Environment Add required variables to .env.example.

6. Test Auth Flow Guide through testing the OAuth flow.

Environment Variables

Auth0:

AUTH0_DOMAIN=your-tenant.auth0.com
AUTH0_CLIENT_ID=your-client-id
AUTH0_CLIENT_SECRET=your-client-secret
PUBLIC_URL=http://localhost:8787

Supabase:

SUPABASE_URL=https://your-project.supabase.co
SUPABASE_ANON_KEY=your-anon-key
SUPABASE_SERVICE_KEY=your-service-key