One missing WHERE clause and every user can see every other users' data! 😬
In this video I go through everything you need to know about permissions to avoid that!
→ Multi-tenancy
→ RLS
→ RBAC
→ JWT Claims
Plus the JWT caching gotcha that trips up almost every dev 👇
We have improved the SQL editor experience for the local version of Supabase.
The SQL snippets will now be stored inside the supabase/snippets directory, which you can commit to git and share across teams, or add them to .gitignore, your choice.
We have a guide on protecting your app against supply-chain attacks that walks you through preventing it from happening to you.
- Pin your dependency versions
- Quarantine new versions
- Verify package provenance
- Control lifecycle scripts
Definitely worth a read
What's the Postgres question you've Googled 10 times and never got a straight answer to?
Ant & Paul are recording an episode to answer your most asked questions.
Leave it below 👇and it might make the cut.
Your database is humming along perfectly fine, and then suddenly it crashes. Cue 3 engineers getting paged at 2am.
Not with Multigres. Primary dies → a replica gets promoted in seconds → the old primary comes back, pg_rewind quietly heals it, and it rejoins as a follower. Zero committed writes lost. Nobody paged.
Coming soon 👀
NodeOps is now officially part of the @supabase Partner Program.
This further deepens the relationship between both ecosystems while making Supabase infrastructure more accessible directly inside CreateOS.
As part of the program, NodeOps integrates directly with Supabase’s Management API and OAuth infrastructure, allowing builders to provision, connect, and manage Supabase projects from within the CreateOS environment itself.
One click now gives builders the full Supabase stack inside CreateOS:
→ Postgres
→ Auth
→ Storage
→ Realtime
No separate dashboards, no manual key copying, and no configuration files to maintain.
Passkey sign-in is here.
This opens up your users to sign in with biometrics (Face ID, Touch ID, Windows Hello), a device PIN, or a hardware security key.
Available to all projects as beta today.
Supabase now supports Passkey auth!
This is one of the most requested features, and we are excited to bring it to you!
Like other Supabase features, using it is incredibly easy! Currently in beta, so try it out and let us know how it goes!