Supabase Auth

You can implement various types of auth:

• Standard Supabase Auth
  • JavaScript example
  • Dart/Flutter example
  • Kotlin example
• Anonymous Sign-Ins
  • JavaScript Example
• Fully custom auth
  • Example
• Experimental: We’ve also heard from the community that Supabase’s newly released support for external auth providers works, but we don’t have any examples for this yet.

To implement either Supabase Auth or Anonymous Sign-Ins, enable the “Use Supabase Auth” setting on the PowerSync instance, and provide your Supabase JWT Secret. Internally, this setting allows PowerSync to verify and use Supabase JWTs directly using HS256 and the provided secret.

Enabling Supabase Auth is also covered in the Supabase & PowerSync integration guide.

To rotate the secret, generate a new secret in the your Supabase project’s API Settings:

The Supabase user UUID will be available as request.user_id() in Sync Rules. To use a different identifier as the user ID in sync rules (for example user email), use Custom authentication.