Account

In Supabase → Authentication → URL configuration → Redirect URLs, add your production origin with /auth/callback and /auth/confirm (and the wildcard pattern Supabase recommends). Confirm signup emails must redirect to one of those routes so the server can finish the session.