Drop-in authentication screens, customizable buttons, and headless manager for Supabase Auth; three-level API enables Google, Apple, magic-link, and anonymous sign-in with reactive session state.
A Kotlin Multiplatform authentication library for Android & iOS — built on Supabase Auth.
One dependency. Four auth methods. Zero boilerplate.
Flow<AuthState> for observing session changesAdd the dependency in your module's build.gradle.kts:
// KMP (commonMain)
implementation("io.github.xemb0:auth:1.0.0")
// Android-only
implementation("io.github.xemb0:auth-android:1.0.0")
That's it — resolves from Maven Central, no extra repositories needed.
AuthConfig.initialize(
supabaseUrl = "https://your-project.supabase.co",
supabaseAnonKey = "your-anon-key",
googleWebClientId = "your-google-client-id",
deepLinkScheme = "com.your.app",
appName = "MyApp",
appTagline = "Welcome back!",
enabledMethods = setOf(
AuthMethod.GOOGLE,
AuthMethod.APPLE,
AuthMethod.EMAIL, // Magic Link
AuthMethod.ANONYMOUS // Optional guest mode
)
)
AuthScreen(
supabaseClient = supabaseClient,
googleSignInService = googleSignInService,
authManager = authManager,
onAuthenticated = { /* navigate to home */ },
onEmailSignIn = { /* navigate to magic link flow */ }
)
That's it. You get a fully styled login screen with all enabled providers.
Drop-in screens that handle the entire auth flow.
// Auth gate — auto-routes based on session state
AuthGate(
authManager = authManager,
authContent = { AuthScreen(...) },
authenticatedContent = { HomeScreen() }
)
Screens included:
| Screen | Description |
|---|
Use standalone buttons anywhere in your UI.
GoogleSignInButton(
supabaseClient = supabaseClient,
googleSignInService = googleSignInService,
onResult = { result ->
when (result) {
is AuthResult.Success -> { /* logged in */ }
is AuthResult.Cancelled -> { /* user cancelled */ }
is AuthResult.Error -> { /* show error */ }
}
}
)
AppleSignInButton(
supabaseClient = supabaseClient,
onResult = { /* handle result */ }
)
EmailSignInButton(
onClick = { /* navigate to magic link flow */ }
)
AnonymousSignInButton(
authManager = authManager,
onResult = { /* handle result */ }
)
All buttons are individually customizable (text, shape, height, colors).
Use AuthManager directly — no UI, full control.
val authManager: AuthManager = SupabaseAuthManager(supabaseClient)
// Anonymous sign-in
val userId = authManager.signInAnonymously()
// Magic link
authManager.sendMagicLink("user@example.com")
isLoggedIn = authManager.isAuthenticated()
user: AuthUser? = authManager.getCurrentUser()
token: String? = authManager.getAccessToken()
authManager.observeAuthState().collect { state ->
(state) {
AuthState.Loading -> { }
AuthState.Authenticated -> { }
AuthState.Unauthenticated -> { }
}
}
authManager.signOut()
AuthConfig.initialize(
// ...
appName = "MyApp",
appTagline = "Your awesome tagline",
appLogo = { Image(painterResource(R.drawable.logo), "Logo") }, // or null for text
appNameColor = Color(0xFF6C63FF),
primaryColor = Color(0xFF6C63FF), // null = use MaterialTheme
accentColor = Color(0xFFFF6584),
)
// Only Google + Email (Magic Link)
enabledMethods = setOf(AuthMethod.GOOGLE, AuthMethod.EMAIL)
// Only Apple
enabledMethods = setOf(AuthMethod.APPLE)
// All four
enabledMethods = setOf(AuthMethod.GOOGLE, AuthMethod.APPLE, AuthMethod.EMAIL, AuthMethod.ANONYMOUS)
AuthConfig.initialize(
// ...
strings = object : AuthStrings() {
welcome =
continueWithGoogle =
signInWithApple =
continueWithEmail =
continueAsGuest =
orDivider =
termsOfService =
}
)
AuthScreen(
// ...
headerContent = {
Text("Special offer: 50% off!", style = MaterialTheme.typography.bodyLarge)
},
footerContent = {
TextButton(onClick = { /* privacy policy */ }) {
Text("Privacy Policy")
}
}
)
The library ships with Koin modules for dependency injection:
// In your app's Koin setup
startKoin {
modules(
authModule, // provides AuthManager
authPlatformModule, // provides GoogleSignInService (platform-specific)
// your app modules...
)
}
Add to your AndroidManifest.xml:
<intent-filter>
<action android:name="android.intent.action.VIEW" />
<category android:name="android.intent.category.DEFAULT" />
Handle in your Activity:
override fun onNewIntent(intent: Intent) {
super.onNewIntent(intent)
handleAuthDeepLink(intent)
}
Add URL scheme in Info.plist and handle in AppDelegate:
func application(_ app: UIApplication, open url: URL, options: ...) -> Bool {
handleAuthDeepLink(url: url)
return true
}
| Version | |
|---|---|
| Kotlin | 2.3+ |
AuthScreen | Full login screen with all configured providers |
AuthGate | Session-aware gate (loading → login or content) |
MagicLinkEmailScreen | Email input for magic link / OTP |
MagicLinkOtpScreen | "Check your email" confirmation screen |
val callbacks = object : AuthCallbacks {
override suspend fun onLoginSuccess(userId: String, method: String) {
analytics.log("login_success", mapOf("method" to method))
}
override suspend fun onLoginError(method: String, error: String) {
analytics.log("login_error", mapOf("method" to method, "error" to error))
}
override suspend fun onSignOut() {
analytics.log("sign_out")
}
}
| Compose Multiplatform | 1.10+ |
| Supabase BOM | 3.3+ |
| Android minSdk | 26 |
| iOS | arm64, simulatorArm64 |
MIT License
Copyright (c) 2025 Xemb0
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
Surfaced from shared tags and platforms — no rankings paid for.