Authentication

Convex Auth supports password credentials, password recovery, email links, Google, GitHub, and Twitter. Provider secrets belong in the selected Convex deployment environment.

Authentication proves identity. Every Convex query and mutation must still enforce workspace membership, workspace role, or platform-admin access.

Set NEXTBASE_ADMIN_EMAIL in Convex. The matching signed-in account can claim the initial platform-admin role from the application admin screen.