Supabase settings checklist:

• Authentication → Providers → enable Email (Password or OTP).
• Authentication → URL Configuration → add Redirect URL: /auth/callback (and your full Vercel domain).
• For fastest testing, you can temporarily disable “Confirm email”.