Authentication

FirstDevJob uses Clerk for authentication, integrated with Convex for backend authorization.

Auth Providers

Users can sign in with:

• GitHub - OAuth 2.0
• Email - Magic link or password

Integration Architecture

User → Clerk → JWT Token → Convex → Validate → Execute

Frontend Setup

The app is wrapped with ClerkProvider:

<ClerkProvider>
  <ConvexClientProvider>
    {children}
  </ConvexClientProvider>
</ClerkProvider>

Backend Validation

Convex functions access user identity:

export const myFunction = mutation({
  handler: async (ctx) => {
    const identity = await ctx.auth.getUserIdentity();

    if (!identity) {
      throw new Error("Not authenticated");
    }

    // User is authenticated
    const userId = identity.subject;
  },
});

Protected Routes

Use Clerk's middleware for route protection:

• /admin/* - Requires admin role
• /profile/* - Requires authentication
• / - Public access

User Roles

Roles are stored in Clerk metadata and synced to Convex.