It seems supabase auth FORCES you to have a web app that's an js bloated treadmill spa bc it only serves raw jwt, no option or support for serving httponly cookies to a browser client.

I'll say it.

RETARDED

You can have a multi page web app without all that spa js crap.