Supabase Auth
Authentication server and Supabase serviceOpen source· verified Oct 2026
Authentication with client SDKs, password and social sign-in, magic links, and JWT sessions. User records live in a Postgres auth schema; tokens integrate with Supabase's Data API and Row Level Security policies.
Official siteReach for it when
- Supabase applications that need identity linked to tested row-level policies
- Teams choosing between managed Supabase Auth and operating the auth server themselves
Worth knowing
The auth server is MIT licensed; hosted plans have separate service limits and costs. Sign-in alone does not secure application tables: configure grants/RLS, keep privileged keys server-side, and handle cookie refresh for SSR.