OAuth Demystified

**OAuth** is a standard way to let users log in with their existing accounts (Google, GitHub, etc.)

**Why it feels like a nightmare:** - Lots of jargon (client ID, client secret, redirect URI, scopes, tokens...) - Multiple websites involved - Documentation scattered everywhere - Confusing error messages

**The simple truth:** You're asking Google/GitHub to verify "this person is real" instead of managing passwords yourself.

**The flow (simplified):** 1. User clicks "Sign in with Google" 2. User is sent to Google's login page 3. User logs into Google (or is already logged in) 4. Google asks: "Do you want to let [your app] access your info?" 5. User clicks "Allow" 6. Google sends user back to your app with a special code 7. Your backend exchanges the code for user info 8. User is now logged in!

**The key insight:** Supabase handles steps 6-7 (the hard parts). You just need to set up the connection.