Email and password. New accounts must confirm by email before they can sign in.
In Supabase: Authentication → URL configuration — add this site and /auth/callback. Enable “Confirm email” for new signups under Providers → Email.
HMO property & service user management