feat(auth): AgentID sign-in button on the web login page - #1467
Conversation
|
Claude finished @Dhravya's task in 1m 35s —— View job Review Complete
Overview: Adds an AgentID OAuth sign-in button to the login page, following the existing pattern for Google/GitHub buttons. Issues found: The The implementation is clean:
Score: 9/10 Minor polish opportunity on the truthiness check, but the code is correct and ready to ship. |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
supermemory-mcp | 5d2b585 | Aug 16 2026, 11:22 PM |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
There was a problem hiding this comment.
Overview: Adds an AgentID OAuth sign-in button to the login page, following the existing pattern for Google/GitHub buttons.
Issues found:
.env.examplehas a formatting bug where the comment is on the same line asXAI_API_KEY=, making the comment the variable's value.
The login page implementation is clean — it correctly uses signIn.oauth2() for the generic OAuth provider, has proper error handling, and follows the existing button patterns. The genericOAuthClient plugin addition in auth.ts is straightforward.
Score: 9/10
Minor formatting fix needed in the env example file, otherwise this is ready to ship.
![graphite-app[bot]](https://avatars.githubusercontent.com/in/158384?s=60&v=4){kind=small}
| {process.env.NEXT_PUBLIC_HOST_ID === "supermemory" || | ||
| process.env.NEXT_PUBLIC_AGENTID_AUTH_ENABLED ? ( |
There was a problem hiding this comment.
The truthiness check for NEXT_PUBLIC_AGENTID_AUTH_ENABLED will evaluate to true for any non-empty string, including "false", "0", or "no". This means setting NEXT_PUBLIC_AGENTID_AUTH_ENABLED=false will still show the AgentID button.
Fix:
{process.env.NEXT_PUBLIC_HOST_ID === "supermemory" ||
process.env.NEXT_PUBLIC_AGENTID_AUTH_ENABLED === "true" ? (| {process.env.NEXT_PUBLIC_HOST_ID === "supermemory" || | |
| process.env.NEXT_PUBLIC_AGENTID_AUTH_ENABLED ? ( | |
| {process.env.NEXT_PUBLIC_HOST_ID === "supermemory" || | |
| process.env.NEXT_PUBLIC_AGENTID_AUTH_ENABLED === "true" ? ( | |
Spotted by Graphite
Is this helpful? React 👍 or 👎 to let us know.
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
supermemory-app | 5d2b585 | Commit Preview URL Branch Preview URL |
Aug 16 2026, 11:23 PM |
Merge activity
|
## What?
Adds a "Continue with AgentID" button to the web app's login page, matching the existing Google/GitHub buttons (same `ExternalAuthButton` pattern, PostHog `login_attempt` capture, last-used badge).
- `packages/lib/auth.ts`: adds the `genericOAuthClient` plugin — generic OAuth providers sign in via `signIn.oauth2({ providerId })`, not `signIn.social`.
- `apps/web/app/(auth)/login/page.tsx`: the button, gated the same way as the other social buttons — always shown on cloud (`NEXT_PUBLIC_HOST_ID === "supermemory"`), opt-in elsewhere via `NEXT_PUBLIC_AGENTID_AUTH_ENABLED` (added to `.env.example`).
## Why?
Companion to supermemoryai/mono#2908, which registers an `agentid` generic OAuth provider (OIDC against auth.agentid.com) on the API so agents can authenticate with their AgentID identity. The consumer app talks to the same better-auth server, so it gets the same sign-in option. mono#2916 additionally auto-invites the agent's verified human owner to the agent's workspace.
Requires mono#2908 to be deployed for the button to work; until then the API rejects the unknown provider and the page shows its normal error state.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> **Medium Risk**
> Touches authentication entry points and OAuth client configuration; risk is moderate because it extends login surface area but follows existing social sign-in patterns and is feature-flagged.
>
> **Overview**
> Adds **Continue with AgentID** on the web login page, using the same `ExternalAuthButton` flow as Google/GitHub (PostHog `login_attempt`, last-used badge, loading/error handling).
>
> The button calls **`signIn.oauth2({ providerId: "agentid" })`** instead of `signIn.social`, enabled by registering **`genericOAuthClient`** on the shared better-auth client in `packages/lib/auth.ts`.
>
> Visibility matches other social providers: shown on cloud when `NEXT_PUBLIC_HOST_ID === "supermemory"`, or elsewhere when **`NEXT_PUBLIC_AGENTID_AUTH_ENABLED`** is set (documented in `.env.example`). Depends on the API registering the `agentid` generic OAuth provider.
>
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 90a3278. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
90a3278 to
5d2b585
Compare
2 participants
What?
Adds a "Continue with AgentID" button to the web app's login page, matching the existing Google/GitHub buttons (same
ExternalAuthButtonpattern, PostHoglogin_attemptcapture, last-used badge).packages/lib/auth.ts: adds thegenericOAuthClientplugin — generic OAuth providers sign in viasignIn.oauth2({ providerId }), notsignIn.social.apps/web/app/(auth)/login/page.tsx: the button, gated the same way as the other social buttons — always shown on cloud (NEXT_PUBLIC_HOST_ID === "supermemory"), opt-in elsewhere viaNEXT_PUBLIC_AGENTID_AUTH_ENABLED(added to.env.example).Why?
Companion to supermemoryai/mono#2908, which registers an
agentidgeneric OAuth provider (OIDC against auth.agentid.com) on the API so agents can authenticate with their AgentID identity. The consumer app talks to the same better-auth server, so it gets the same sign-in option. mono#2916 additionally auto-invites the agent's verified human owner to the agent's workspace.Requires mono#2908 to be deployed for the button to work; until then the API rejects the unknown provider and the page shows its normal error state.
🤖 Generated with Claude Code
Note
Medium Risk
Touches authentication entry points and OAuth client configuration; risk is moderate because it extends login surface area but follows existing social sign-in patterns and is feature-flagged.
Overview
Adds Continue with AgentID on the web login page, using the same
ExternalAuthButtonflow as Google/GitHub (PostHoglogin_attempt, last-used badge, loading/error handling).The button calls
signIn.oauth2({ providerId: "agentid" })instead ofsignIn.social, enabled by registeringgenericOAuthClienton the shared better-auth client inpackages/lib/auth.ts.Visibility matches other social providers: shown on cloud when
NEXT_PUBLIC_HOST_ID === "supermemory", or elsewhere whenNEXT_PUBLIC_AGENTID_AUTH_ENABLEDis set (documented in.env.example). Depends on the API registering theagentidgeneric OAuth provider.Reviewed by Cursor Bugbot for commit 90a3278. Bugbot is set up for automated code reviews on this repo. Configure here.