# Supabase Auth
URL: https://wwadd.dev/tools/supabase-auth · Official site: https://supabase.com/docs/guides/auth
Kind: Authentication server and Supabase service · License: Open source · Last verified: 2026-10-05

Authentication with client SDKs, password and social sign-in, magic links, and JWT sessions. User records live in a Postgres auth schema; tokens integrate with Supabase's Data API and Row Level Security policies.

Reach for it when:
- Supabase applications that need identity linked to tested row-level policies
- Teams choosing between managed Supabase Auth and operating the auth server themselves

Worth knowing: The auth server is MIT licensed; hosted plans have separate service limits and costs. Sign-in alone does not secure application tables: configure grants/RLS, keep privileged keys server-side, and handle cookie refresh for SSR.

Repository: https://github.com/supabase/auth
Recorded SPDX baseline: MIT