genesis-2/notebooks/supabase-security.ipynb

import { createClient } from "@supabase/supabase-js";
const supabaseUrl = Deno.env.get("SUPABASE_URL") || env.SUPABASE_URL;
const supabaseKey = Deno.env.get("SUPABASE_ANON_KEY") || env.SUPABASE_ANON_KEY;

const supabase = createClient(supabaseUrl, supabaseKey);
const supa = await supabase.auth.signInWithPassword({
    email: 'guillermo.arrieta@lasalle.mx',
    password: 'admin',
});

import { jwtDecode } from "npm:jwt-decode";

const listener = supabase.auth.onAuthStateChange(async (event, session) => {
  if (session) {
    const jwt = jwtDecode(session.access_token);
    console.log(event, jwt);
    // store in the session
    localStorage.setItem("jwt", JSON.stringify(session));
  }
});

listener;

{
  access_token: "eyJhbGciOiJFUzI1NiIsImtpZCI6ImI4MTI2OWYxLTIxZDgtNGYyZS1iNzE5LWMyMjQwYTg0MGQ5MCIsInR5cCI6IkpXVCJ9.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.LEXrbBNetdCb8zfCiLcXhJg3EmX6XuE4cYOaFmYg1PhvvNI5XorbJQHhb4SQVggQDOauIqqkMRsK64GK1nheIw",
  token_type: "bearer",
  expires_in: 3600,
  expires_at: 1772476871,
  refresh_token: "lwgtrzw2tpzl",
  user: {
    id: "95d1f381-7023-4f33-bc54-08ccd08abf41",
    aud: "authenticated",
    role: "authenticated",
    email: "guillermo.arrieta@lasalle.mx",
    email_confirmed_at: "2026-01-13T14:54:39.096101Z",
    phone: "",
    confirmed_at: "2026-01-13T14:54:39.096101Z",
    last_sign_in_at: "2026-03-02T17:41:10.98658403Z",
    app_metadata: { provider: "email", providers: [ "email" ] },
    user_metadata: { email_verified: true },
    identities: [
      {
        identity_id: "b2f3094d-a29b-42b5-be69-3397282ffcd7",
        id: "95d1f381-7023-4f33-bc54-08ccd08abf41",
        user_id: "95d1f381-7023-4f33-bc54-08ccd08abf41",
        identity_data: {
          email: "guillermo.arrieta@lasalle.mx",
          email_verified: false,
          phone_verified: false,
          sub: "95d1f381-7023-4f33-bc54-08ccd08abf41"
        },
        provider: "email",
        last_sign_in_at: "2026-01-13T14:54:39.085382Z",
        created_at: "2026-01-13T14:54:39.08544Z",
        updated_at: "2026-01-13T14:54:39.08544Z",
        email: "guillermo.arrieta@lasalle.mx"
      }
    ],
    created_at: "2026-01-13T14:54:39.081453Z",
    updated_at: "2026-03-02T17:41:11.002577Z",
    is_anonymous: false
  },
  weak_password: {
    message: "Password should be at least 6 characters.",
    reasons: [ "length" ]
  }
}

{
  data: {
    subscription: {
      id: Symbol("auth-callback"),
      callback: [AsyncFunction (anonymous)],
      unsubscribe: [Function: unsubscribe]
    }
  }
}

const raw = localStorage.getItem("jwt")
const jwt = raw ? JSON.parse(raw) : null

console.log(jwt)

{
  access_token: "eyJhbGciOiJFUzI1NiIsImtpZCI6ImI4MTI2OWYxLTIxZDgtNGYyZS1iNzE5LWMyMjQwYTg0MGQ5MCIsInR5cCI6IkpXVCJ9.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.XbxmaKPEo9Vqr1_W1vuXIaYwGiifaBsaqIwFdJvIuMrFPx5VeW9-NeUasWq3ka1DBsEMWaCFeIKykp9QlvDXqQ",
  token_type: "bearer",
  expires_in: 3600,
  expires_at: 1772472003,
  refresh_token: "gjdfzz4y4y3v",
  user: {
    id: "95d1f381-7023-4f33-bc54-08ccd08abf41",
    aud: "authenticated",
    role: "authenticated",
    email: "guillermo.arrieta@lasalle.mx",
    email_confirmed_at: "2026-01-13T14:54:39.096101Z",
    phone: "",
    confirmed_at: "2026-01-13T14:54:39.096101Z",
    last_sign_in_at: "2026-03-02T13:50:31.464916Z",
    app_metadata: { provider: "email", providers: [ "email" ] },
    user_metadata: { email_verified: true },
    identities: [
      {
        identity_id: "b2f3094d-a29b-42b5-be69-3397282ffcd7",
        id: "95d1f381-7023-4f33-bc54-08ccd08abf41",
        user_id: "95d1f381-7023-4f33-bc54-08ccd08abf41",
        identity_data: {
          email: "guillermo.arrieta@lasalle.mx",
          email_verified: false,
          phone_verified: false,
          sub: "95d1f381-7023-4f33-bc54-08ccd08abf41"
        },
        provider: "email",
        last_sign_in_at: "2026-01-13T14:54:39.085382Z",
        created_at: "2026-01-13T14:54:39.08544Z",
        updated_at: "2026-01-13T14:54:39.08544Z",
        email: "guillermo.arrieta@lasalle.mx"
      }
    ],
    created_at: "2026-01-13T14:54:39.081453Z",
    updated_at: "2026-03-02T16:20:03.535209Z",
    is_anonymous: false
  }
}

useEffect(() => {
  const onFocus = () => supabase.auth.refreshSession();
  window.addEventListener("focus", onFocus);
  return () => window.removeEventListener("focus", onFocus);
}, []);

Stack trace:
ReferenceError: useEffect is not defined
    at <anonymous>:1:22