Sign in
Left of the Dial uses Google, Apple, or Microsoft for your account (via Supabase Auth). Discogs is a connected service you add afterward to sync collection and wantlist—not your login identity.
How to sign in
1. Open Sign in (login page on web, or the login screen in the mobile app). 2. Choose Continue with Google, Apple, or Microsoft. 3. Complete the provider flow. You’re returned to the app with a session (JWT). 4. In Profile, tap Connect next to Discogs when you want to sync your Discogs library. After connecting, use Load full Discogs library if you want every page pulled in.
Web: OAuth returns to `/login/`; the page exchanges the Supabase access token for an app JWT and stores it in localStorage, then sends you to the app.
iOS / Android: The app uses the deep link `leftofthedial://callback` (Supabase), exchanges the access token via `POST /api/auth/supabase-jwt`, and stores the JWT securely.
Connect Discogs (after sign-in)
1. Sign in with Google, Apple, or Microsoft. 2. Open Profile. 3. Tap Connect on Discogs and approve the app on Discogs. 4. Optionally tap Load full Discogs library to sync all collection/wantlist pages.
If Connect fails with a Redis or session error, sign in again and retry. Production needs a working Redis URL for OAuth state.
If sign-in fails
- Account sign-in is not configured — Server needs `SUPABASE_URL`, `SUPABASE_ANON_KEY`, `SUPABASE_JWT_SECRET`, and `JWT_SECRET`. See SUPABASE-SETUP.md.
- "Invalid or expired token" — Sign in again; the previous session may have expired.
- Redirect doesn't return to the app — On Web, add `https://www.leftofthedial.app/login/` (and local `/login/`) to Supabase Auth redirect URLs. On Expo, add `leftofthedial://callback`.
Sign out
1. Go to Profile. 2. Tap Sign out.
Your stored token is removed and cached data (collection, wantlist) is cleared on this device. Connected services stay linked to your account on the server until you disconnect them.