---
title: "Provider Config"
method: GET
path: "/api/auth/provider-config"
tags: ["auth"]
---

# Provider Config

`GET /api/auth/provider-config`

## Request

- Base URL: `https://app.nerdit.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://app.nerdit.ai/api/auth/provider-config`
- Auth: none declared

Serve the authorization page the Supabase values a browser may hold.

Three, and deliberately not the fourth: the publishable key is
browser-safe by definition, the project URL and the OAuth client id are
already public in the authorization redirect every sign-in follows, and
``supabase_oauth_client_secret`` is the one value here that would turn
this unauthenticated GET into a credential leak. Serving the other
three rather than baking them into the bundle keeps the frontend build
environment-free, which is how the rest of the SPA already works.

## Response `200`

Successful Response

- ProviderConfigView
  - `supabase_url` string, required
  - `supabase_publishable_key` string, required
  - `supabase_oauth_client_id` string, required

## Other responses

- `404`: Not Found

---

[API](https://skmtc.dev/nerdit/apis/nerdit-cloud-web.md) · [All operations](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/llms.txt) · [OpenAPI document](https://skmtc.dev/nerdit/apis/nerdit-cloud-web/revisions/06e3b44b58be?raw)