fix(config): use dart-define supabase settings and default to PKCE auth flow

README.md

@@ -14,7 +14,14 @@ car64 is a Flutter + Supabase Hot Wheels collector app with a fast scanning work
 ## Local Development
 
 1. Install Flutter (stable) and run `flutter doctor`.
-2. Configure Supabase keys in app configuration.
+2. Configure Supabase values via build-time variables (`--dart-define`), for example:
+
+	```bash
+	flutter run \
+	  --dart-define=SUPABASE_URL=https://your-project.supabase.co \
+	  --dart-define=SUPABASE_ANON_KEY=your_anon_key \
+	  --dart-define=SUPABASE_USE_PKCE=true
+	```
 3. Install dependencies:
 
 	```bash

lib/main.dart

@@ -12,8 +12,18 @@ export 'package:supabase_flutter/supabase_flutter.dart'
     show AuthException, UserAttributes;
 
 // ── Supabase credentials ──────────────────────────────────────────────
-const _supabaseUrl = 'https://yaopcyubateifnicpywp.supabase.co';
+const _supabaseUrl = String.fromEnvironment(
-const _supabaseAnonKey = 'sb_publishable_a7czIl7-TGeBJvid9z2XZA_3ElImliL';
+  'SUPABASE_URL',
+  defaultValue: 'https://yaopcyubateifnicpywp.supabase.co',
+);
+const _supabaseAnonKey = String.fromEnvironment(
+  'SUPABASE_ANON_KEY',
+  defaultValue: 'sb_publishable_a7czIl7-TGeBJvid9z2XZA_3ElImliL',
+);
+const _usePkceAuthFlow = bool.fromEnvironment(
+  'SUPABASE_USE_PKCE',
+  defaultValue: true,
+);
 
 Future<void> main() async {
   WidgetsFlutterBinding.ensureInitialized();
@@ -21,8 +31,10 @@ Future<void> main() async {
   await Supabase.initialize(
     url: _supabaseUrl,
     anonKey: _supabaseAnonKey,
-    authOptions: const FlutterAuthClientOptions(
+    authOptions: FlutterAuthClientOptions(
-      authFlowType: AuthFlowType.implicit,
+      authFlowType: _usePkceAuthFlow
+          ? AuthFlowType.pkce
+          : AuthFlowType.implicit,
     ),
   );