Supabase Auth

​

Using Legacy JWT Signing Keys

1. In the PowerSync Dashboard, select your project and instance and go to the Client Auth view.
2. Enable the “Use Supabase Auth” checkbox.
3. Copy your JWT Secret from your Supabase project’s JWT settings.
4. Paste the secret into the “Supabase JWT Secret (optional) Legacy” field.
5. Click Save and Deploy.

​

Manual JWKS Configuration

• You’re using a non-standard database connection string
• You’re connecting to a self-hosted Supabase instance
• You’re using Supabase local development (Docker)

1. In the PowerSync Dashboard, go to the Client Auth view.
2. Leave the “Use Supabase Auth” checkbox unchecked.
3. Add a JWKS URI:
   Copy

   http://localhost:54321/auth/v1/.well-known/jwks.json
   
   Replace <your-project-ref> with your Supabase project reference ID.
4. Add authenticated as an accepted JWT audience.
5. Click Save and Deploy.

​

Using Legacy JWT Signing Keys

client_auth:
  supabase: true
  supabase_jwt_secret: your-jwt-secret-here

​

Manual JWKS Configuration

• PowerSync cannot detect your Supabase project from the connection string
• You’re using self-hosted Supabase
• You’re using Supabase local development (Docker)
• You need explicit control over the authentication settings

client_auth:
  jwks_uri: http://localhost:54321/auth/v1/.well-known/jwks.json
  audience:
    - authenticated