┌─────────┐     ┌─────────┐     ┌─────────┐
│  User   │────►│ Supabase│────►│ usmewe  │
│         │     │  Auth   │     │   API   │
└─────────┘     └─────────┘     └─────────┘
     │               │               │
     │  1. Login     │               │
     │──────────────►│               │
     │               │               │
     │  2. JWT Token │               │
     │◄──────────────│               │
     │               │               │
     │  3. API Request with JWT      │
     │──────────────────────────────►│
     │               │               │
     │  4. Response  │               │
     │◄──────────────────────────────│

import { createClient } from '@supabase/supabase-js';

const supabase = createClient(SUPABASE_URL, SUPABASE_ANON_KEY);

// Sign in with Google
const { data, error } = await supabase.auth.signInWithOAuth({
  provider: 'google',
  options: {
    redirectTo: 'https://yourapp.com/callback'
  }
});

// Sign up
const { data, error } = await supabase.auth.signUp({
  email: 'user@example.com',
  password: 'xxx' // Replace with actual password
});

// Sign in
const { data, error } = await supabase.auth.signInWithPassword({
  email: 'user@example.com',
  password: 'xxx' // Replace with actual password
});

// Get JWT
const token = data.session.access_token;

curl -X GET "https://api.usmewe.com/v1/users/me" \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

const { data, error } = await supabase.auth.refreshSession();
const newToken = data.session.access_token;

curl -X GET "https://api.usmewe.com/v1/users/me" \
  -H "X-API-Key: your_api_key"

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Invalid or expired token"
  }
}

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED",
    "message": "Authorization header required"
  }
}