Skip to main content

​
Authentication Overview

Apollo uses Supabase Auth with JWT-based authentication. All API requests require a valid JWT token passed in the Authorization header.

​
Sign-In Methods

The standard sign-in method. Users register with email and password, then confirm their email via a verification link.
  1. Navigate to the login page at apol.dev
  2. Enter your email and password
  3. Click Sign In

​
Session Management

  • Sessions are managed by Supabase with automatic token refresh
  • Navigation history is persisted in localStorage so you return to where you left off
  • Sessions persist across browser refreshes

​
User Types

Apollo supports three user types, determined by organization membership:
User TypeDescriptionAccess
InternalFull team members (org roles: owner, admin, member)All features based on role
CustomerExternal clients with limited viewSimplified dashboard, assigned projects only
External CollaboratorThird-party contributorsSpecific project access only
User types are derived from the organization_members role, not set directly. An external_collaborator org role maps to the External Collaborator user type.

​
Permission Model

Apollo uses a three-tier permission model. See Permissions for the full breakdown.