Stytch + Supabase

​

Consumer Authentication

See this community project for detailed setup instructions: https://github.com/guillempuche/localfirst_react_server

​

B2B SaaS Authentication

The high-level approach is:

• Users authenticate via Stytch
• Extract the user and org IDs from the Stytch JWT
• Generate a Supabase JWT by calling a Supabase Edge Function that uses the Supabase JWT Secret for signing a new JWT
  • Set the KID in the JWT header
    • You can obtain this from any other Supabase JWT by extracting the KID value from the header — this value is static, even across database upgrades.
  • Set the AUD field to authenticated
  • Set the SUB field in the JWT payload to the user ID
• Pass this new JWT into your PowerSync fetchCredentials function

Use the below settings in your PowerSync Dashboard:

Reach out to us directly on our Discord server if you have any issues with setting up auth.