docs: add a PKCE authentication with Supabase example

[morlinbrot]

Closes #1217

Adds an example on how to implement the PKCE authentication flow with Supabase.

I included a link to a repo of mine holding the code to a fully fleshed out example app as a more comprehensive point of reference, hope that is ok. In fact, I was thinking of deploying that app on Deno Deploy and add it to the Showcase section, lmk if that would be a good idea.

[iuioiua]

This is a great tutorial so far!

[morlinbrot]

This is a great tutorial so far!

Thanks! Also for the prompt and thorough review. I'll be able to work on this tomorrow but before that, I have a couple of questions regarding the --env CLI option.

In my local testing, it does not seem to have any effect. In fact, I am suddenly able to run the app with neither using @std/dotenv nor the --env flag. I do have the -A option specified, which includes --allow-env, but that should not enable actual reading of .env files at runtime, right? What am I not seeing here?

In general, for educational content like this, should I include the most precise run command deno run -r --unstable --allow-env --allow-read --allow-write --allow-run --allow-net --watch=static/,routes/ dev.ts or is it fine to use the -A flag to make it shorter?

[iuioiua]

In my local testing, it does not seem to have any effect. In fact, I am suddenly able to run the app with neither using @std/dotenv nor the --env flag. I do have the -A option specified, which includes --allow-env, but that should not enable actual reading of .env files at runtime, right? What am I not seeing here?

You understand correctly. --allow-env allows environment variables to be read and written but doesn't read .env files. --env does that, though. If you're using neither load() from std/dotenv or --env, I'd expect your example to fail somewhere. Try applying this and see if the issue persists. Also, just making sure, are you indeed using a .env file or setting environment variables in the CLI?

In general, for educational content like this, should I include the most precise run command deno run -r --unstable --allow-env --allow-read --allow-write --allow-run --allow-net --watch=static/,routes/ dev.ts or is it fine to use the -A flag to make it shorter?

Using specific permission flags instead of -A, in this case, is better as it's more explicit to the reader as to what permissions are required for this workflow.

[iuioiua]

A couple more nits.

[iuioiua]

@thorwebdev, feel free to review if you'd like.

[iuioiua]

LGTM! Thank you.

[morlinbrot]

Quick ping to see if this is still on the radar. Is there anything I can do to move this forward?

[iuioiua]

Just awaiting Marvin's review 🙂

[iuioiua]

PTAL @marvinhagemeister

[marvinhagemeister]

This is great, thanks for adding this 👍