1
Allow redirect URLs in Supabase.
Add the local, Pages, preview, and production wildcard URLs in Authentication URL Configuration before testing email links.
IWHFAuth setup
Turn member access on.
A short operating checklist for the IWHF Supabase auth layer: redirects, first account, admin bootstrap, approval, then desk testing.
Local statusChecking browser auth wiring.
2
Create the first account.
Use the local auth page to create the founder account. New accounts are intentionally pending until approved.
3
Bootstrap that account as active admin.
Run the generated SQL once in Supabase SQL Editor. After this, the browser approval console handles future users.
4
Approve member profiles.
From an active admin session, set `access_status` to active and choose founder, donor, program, or admin role.
5
Review the funding catalog.
Promote seeded records to verified, correct deadlines and source URLs, or archive stale opportunities from the admin catalog editor.
6
Test each private desk.
Founder/program/admin should enter the founder desk. Donor/admin should enter the donor desk. Pending users should remain blocked.