User Authentication Basics

**Authentication** = Proving you are who you claim to be

**Authorization** = Proving you can do what you're trying to do

**Authentication in practice:** 1. User creates an account (email + password) 2. Supabase stores the email and a secure hash of the password 3. When user logs in, Supabase verifies the credentials 4. User gets a token (proof they're authenticated) 5. App uses token for subsequent requests

**What Supabase handles:** - Secure password storage (hashed, not plain text) - Session management - Token generation and validation - Password reset emails - Email verification

**What you need to build:** - Signup form - Login form - Display logged-in state - Logout button - Connect user data to their account

Let's do it!