Auth Overview - Naïve

The Auth primitive operates on a fullstack app’s managed backend. Auth configuration uses the backend management API (via the apps backend proxy); admin user management uses the auth service (/auth/v1/admin) with the service-role key. App-scoped, on both the company mount and per-user mount; the kit must enable the auth primitive on per-user mounts.

Admin user operations use the project service-role key — privileged. Disable the auth primitive in an Account Kit to keep agents away from end-user accounts.

Endpoints

Method	Path	Description
`GET` / `PATCH`	`/v1/apps/:id/supabase/proxy/v1/projects/{ref}/config/auth`	Read / update auth config (management API)
`ANY`	`/v1/apps/:id/auth/proxy/*`	Auth service passthrough (`/auth/v1/*`, incl. `/admin/users`)

# Auth config
curl "https://api.usenaive.ai/v1/apps/<app-id>/supabase/proxy/v1/projects/<ref>/config/auth" \
  -H "Authorization: Bearer nv_sk_live_..."

# Admin: list users
curl https://api.usenaive.ai/v1/apps/<app-id>/auth/proxy/admin/users \
  -H "Authorization: Bearer nv_sk_live_..."

# Admin: create user
curl -X POST https://api.usenaive.ai/v1/apps/<app-id>/auth/proxy/admin/users \
  -H "Authorization: Bearer nv_sk_live_..." -H "Content-Type: application/json" \
  -d '{"email":"user@example.com","password":"...","email_confirm":true}'

SDK

await naive.auth.updateConfig({ site_url: "https://myapp.com" });
await naive.forUser(userId).auth.users.create({ email: "u@example.com", password: "..." });

See the Auth guide and the auth sub-client.

​Endpoints

​SDK

Endpoints

SDK