Native Mobile Auth Support for Google and Apple Sign in#

Supabase Auth now has full native support for Sign in with Apple and Google, which means it can now be used with one-tap sign in methods like Sign in with Apple JS, Sign in with Google for Web, or even in Chrome extensions.

Learn more

Supabase CLI: what is new?#

It’s been a busy month for the Supabase CLI. We have added a tonne of new features:

• Migrations: view all your migrations inside the Dashboard with the SQL code that was executed.
• Functions: the CLI now serves all Functions when developing locally.
• Database monitoring: we’ve added a usage flag for monitoring key Postgres statistics.

See all updates

Revamped billing experience#

We have made huge improvements to the billing tooling inside Supabase Studio, including:

• Easy monitoring of current usage, overage, and plan limits.
• Streamlined subscription management for upgrades or downgrades.
• Detailed usage billing breakdowns and compute instance specifications.
• And more!

New subscription page | New usage page

Login with Kakao#

Added the popular social platform Kakao as new social provider. Allow your users to effortlessly sign in using their Kakao accounts and make authentication a breeze while expanding your app's reach to a wider audience.

Login with Kakao

Quick product updates#

• [Postgres Tooling] Implemented parallel Index build in regular and recovery state into OrioleDB. [PR]
• [Edge Functions] Edge Functions troubleshooting guide. [Doc]
• [Storage] Object id is now returned in the response when uploading an object. [PR]
• [Realtime] A new debugging tool to test your realtime endpoints together with your JWTs and Row Level Security policies. [Realtime Inspector]
• [Docs] A full guide on database partitions for developers looking to scale up. [Guide]

Launch Week alert: save the date#

Supabase Vector: the open source Vector Toolkit for Postgres#

Storing vector embeddings in Postgres with 'pgvector' is becoming increasingly popular for AI applications, so we're building out a collection of tools to store, index, and query embeddings at scale.

Supabase Vector

Vault is now available for all projects#

Vault is a Postgres extension and accompanying Supabase UI that makes it safe and easy to store encrypted secrets and other data in your database.

Learn how to use Vault

Auth Helpers now include server-side Auth and full support for the Next.js App Router#

We have updated the Next.js Auth Helpers package to make it available across the client and server of the App Router. They also now implement server-side auth by default with PKCE - meaning the entire auth flow is now possible server-side.

Updated docs

Video course

Improving our dashboard with user feedback#

As we plan the next few months of Dashboard development, we're reaching out to users to see all the different ways people use the Dashboard in their work.

Last month, we opened up a public RFC for the Dashboard SQL Editor. It's been amazing to see how people use this tool to build their projects. If you're a heavy user of the SQL Editor, we'd love to get your feedback.

We also started doing user interviews to understand how users use the Dashboard. Our goal is to build the best possible Dashboard for all of our users, and you can help! Reach out to Terry you would like to share your experience.

Quick product announcements#

• [Auth] You can now use Turnstile as a Captcha provider. Doc

• [Auth] How to send a password reauthentication nonce. Doc

• [Dashboard] Supabase Wrappers UI that supports pulling data in from Firebase, Stripe, S3, and Clickhouse. Create a Wrapper

• [Edge Functions] Support for deploying all Edge Functions via CLI. Doc

• [Edge Functions] Custom domains and vanity domains support for Edge Functions. PR

• [Storage] Image Transformation is now out of Beta. Doc

• [Postgres Extensions] pg_cron 1.5.2 (new projects only) now supports sub-minute schedules. PR

New Integrations, templates, and examples#

• We worked with Cloudflare on a new integration that makes it super easy to connect your Supabase database from Cloudflare Workers. Doc
• Deno Fresh Starter: ChatGPT-style doc search. Template
• Vector Similarity Search in Bubble using Supabase Vector. Integration
• Our friends from 1Password announced Passage and wrote an integration guide with Supabase. Doc
• Supabase RLS with Typescryp.
• Supabase Vecs: a vector client for Postgres
• ChatGPT plugins now support Postgres & Supabase
• Building ChatGPT Plugins with Supabase Edge Runtime

Day 1 - Supabase Logs: open source logging server#

Logflare is the hub of analytics streams for Supabase. We are open sourcing it so that you can self-host your own Logging infrastructure.

Blog Post Video overview

Day 2 - Supabase Edge Runtime: Self-hosted Deno Functions#

You can now self-host Edge Functions and run them in local development using our new Edge Runtime. We published a guide showing how to self-host Edge Functions with Fly and what more is coming ⚡

Blog post Video overview

Day 3 - Storage v3: Resumable Uploads with support for 50GB files#

Supabase Storage received many of the most requested features from our users: Resumable Uploads, Quality Filters, Next.js support, and WebP support.

Blog post Video overview

Day 4 - Supabase Auth: SSO, Mobile, and Server-side support#

On day 4, we introduced SSO with SAML 2.0, PKCE, and Sign in with Apple for iOS. It felt like acronym day, but it was actually Auth day!

Blog post Video overview

Day 5 - Supabase Studio 2.0 with new AI features#

Supabase Studio got a major upgrade that goes from redesigns to improved developer experience, and new tools. We have the features people have been asking for and new capabilities that will change the way you work.

Blog Post Video overview

Introducing dbdev: PostgreSQL Package Manager#

database.dev fills the same role for PostgreSQL as npm for JavaScript or pip for Python, it enables publishing libraries and applications for repeatable deployment. Our goal is to create an open ecosystem for packaging and discovering SQL.

Blog post

More product announcements#

• Trusted Language Extensions for Postgres. [Blog post]
• What's New in pg_graphql v1.2. [Blog post]
• GitHub Discussions are now a new knowledge source for search & AI (Troubleshooting category only for now). [Check it out]
• New API report with routing information for each chart, making it easier to debug API calls.  [PR]
• Storage permission changes: the developer role is now allowed to update the storage settings (previously was only owner and admin). [PR]

GraphiQL editor in the dashboard#

The most popular GraphQL IDE/API explorer is now built into the dashboard! You can now explore and query your GraphQL API produced by pg_graphql.

Try it now.

Supabase + OpenAI search#

We've updated our Docs search functionality to use pgvector + OpenAI. Still no cease and desist from Microsoft, so you can continue to ask Clippy any Supabase-specific questions 📎💚

Ask Clippy.

Serve all the functions!#

Do you use multiple Edge Functions in your project? Then celebrate! Supabase CLI 1.36+ now supports serving multiple Edge Functions at the same time.

To enable the feature, just run supabase functions serve in your project.

Check the docs.

Smaller Postgres docker images for everyone#

We rewrote the Postgres Dockerfile with multi-stage builds so that each extension is compiled in its own separate stage. This reduces the size of the image from 1.3GB to 250MB, enabling a much faster boot time.

See it yourself

New UI for Postgres Roles#

We've improved database role management. You can create, update, and delete database roles through the dashboard. Just one small step towards column-level security

Check it out.

API docs in the table editor#

API docs got a light touchup and were moved to the table editor. You can now look up API methods and generate & download type files right there ✨

Check it out.

Quick product updates#

• Postgres Extensions: We're rolling out some fixes for several Postgres extensions. Check your Dashboard notifications to see if you need to take any actions.

• Auth: Added full OpenAPI 3.0 spec which provides a comprehensive overview of the API with documentation on each request. PR

• Database: supabase-js now infers the response type from your query. If the inferred type is incorrect, you can use .returns<MyType>() to override it. Doc

• Dashboard: Improved database roles management, you can now create, update and delete database roles through the dashboard. Dashboard

• Dashboard: We've provided a reference panel showing all available paths that can be queried from each respective source that improves the Logs Explorer experience. Dashboard

- Edge Functions: upgraded to Deno 1.30.3, that supports TypeScript 4.9.x and introduces satisfies. Thanks to Benjamin Dobell 🙏. PR

• Realtime: Broadcast only primary key(s) for deleting records when RLS is enabled and replica identity is full. PR

The first month of the year was very productive here at Supabase. Here is a highlight of what we shipped during January:

Storing OpenAI embeddings in Postgres with pgvector#

pgvector is a popular PostgreSQL extension for storing embeddings and performing vector similarity search. It was one of the most requested extensions by the AI/ML community and is now available thanks to gregnr.

Read the announcement

Meet Supabase Clippy: ChatGPT for Docs#

Greg wasted no time and took pgvector for a spin, he combined it with OpenAI to build Supabase Clippy, a next-generation doc search. The first implementation is a 1-week MVP and fully open source, so you can build on top of it.

• Read the blog post
• Watch the video tutorial

Client library reference: Python and C##

We have released extensive reference docs for C# and Python, detailing every object and method. What are you going to build?

• C# Client Library
• Python Client Library

pg_graphql now supports Views, Materialized Views, and Foreign Tables#

Views, Materialized Views, and Foreign Tables are three database objects that provide a powerful way to access and organize and transform data without duplication.

Read the docs

Automatic WebP detection for Image Transformation#

WebP is a modern image format that provides superior lossless and lossy compression for images on the web. We are enabling format conversion by default for anyone who has Image Transformations. You can opt out by including format: origin in the transformation parameters.

Read the docs

Quick product updates#

-  Postgres Extension: Another powerful and time-tested extension, pg_repack, is added to Supabase. [PR] - Auth: Multi-tab session support using the new browser BroadcastChannel API. If a user logs out on one tab, they will now be logged out on all tabs. [PR] - Postgres: Superior speed with lz4 database compression. [PR] - Postgres: Use ICU locales and collations for text attribute ordering in database queries. [PR] - Docs: New guide on scheduling functions with pg_cron. [Guide] - Edge Functions: You can now download source codes of deployed edge functions from the CLI. [Doc]

Launch Week 6 is just around the corner! We’re saving most of November’s updated as a surprise for Launch Week, but we still had time to ship some goodies this month.

Launch Week 6 tickets#

Next week, we go all out for LW6. It’s 5 days of shipping, including major features requested by the community. You don’t want to miss a thing, so make sure to claim your free ticket (and you might win some very special SupaSwag).

Get your ticket

Remix Auth Helpers#

It’s here! The much-awaited Remix Auth Helpers make server-side auth even easier and with a better experience. Up to date with supabase-js V2 and can be used with Typescript.

Read the docs

Edgy Edge Functions#

We launched a new YouTube series, Edgy Edge Functions, where we take a deep look at a new function every week.

Plus, we published three new functions examples: Generate OG Images, Build API servers using Oak, and Generate Screenshots using Puppeteer.

Quick product updates#

• NextAuth Supabase Adapter. Docs. This allows you to run NextAuth as your authentication server while storing user and session data in a dedicated next_auth schema in your Supabase Database. Complete with support for RLS. Do note that NextAuth is a standalone Authentication server that does not interface with Supabase Auth and therefore provides a different feature set.

• Fixed two issues with the supabase.auth.signOut function: cookies not clearing properly and session not removed.

• You can now customize magic links by providing access to the {{ .TokenHash }}. PR

• Now you can do redirects from your functions. PR

• Conda support (conda install -c conda-forge supabase and everything else in py)

supabase-js v2 and supabase-flutter v1 released#

The new versions of our two most popular SDKs have been fully released. It couldn’t have happened without our amazing community, thanks to everyone involved. Now, it’s time to build 🛠

Try supabase-js V2

Try flutter-supabase V1

New Next.js quickstart & Next.js 13 example#

Next.js is all the rage right now 🔥 

Next.js Conf raised the bar for dev conferences. We had the honor of being a Gold Sponsor, so we revamped our Next.js Quickstart guide to include our pre-built Auth UI and Auth Helpers.

And Next.js 13 was announced! Making it extremely easy to fetch and cache data from our Serverless API. So we put together an example to try it out.

Supabase Auth and Server-Side Rendering#

The Auth team published an in-depth doc explaining how Supabase Auth supports server-side rendering. Includes an explanation of the authentication flow and answers to some of the more common questions.

Read the docs.

Database Testing with pgTAP#

Do you have 100% code coverage? Probably not, because that’s usually the last thing you think of, but definitely not if you don’t have database tests. We just shipped a framework for Database Tests which makes it incredibly easy to test your database using pgTAP an pg_prove.

Read the docs.

Edge Functions Update#

Functions now support GET requests! Other HTTP verbs such as PUT, PATCH, and DELETE are supported too.

Check this example

Quick Product Updates#

• supabase-py 🐍 now has functions support! PR
• You can now detect users’ location from Edge Functions easily by using X-Forwarded-For header. Example
• Return provider_refresh_token along with provider_access_token. PR
• Added a refreshSession method to allow users to forcefully refresh a session instead of waiting for it to autorefresh upon expiry. Thanks to @j4w8n for the PR 🙇🏻‍♂️
• Logging: realtime, storage, postgrest, and pgbouncer released.
• Trigger a file download by adding the download query parameter to your storage objects. storage-api. PR

Kaizen Week#

We did something a bit strange during September - we didn't work on features. Quite the opposite. After Launch Week we did three subsequent weeks of Kaizen, a term we use internally to deliver constant and incremental improvement. Each week had a different focus:

• Week 1: QA and testing
• Week 2: Documentation
• Week 3: Issue Backlog and Automation

It's pretty rare for a company to stop feature development altogether, but luckily we're just a bunch of developers so we all know the pain of technical debt. After 5 Launch Weeks, working on testing and backlogs feels like a bit of a relief.

We saw a lot of progress across our Open Issues - closing over 250 issues and 50 Pull Requests.

Auth UI on Product Hunt#

We launched the new Auth UI on Product Hunt! Auth UI is a pre-built React component for authenticating users with Supabase Auth. It supports custom themes and extensible styles to match your brand and aesthetic.

Check out the launch.

Postgres WASM#

If you've ever wondered, "can I run Postgres inside a browser, using an embeddable Linux Virtual Machine?", wonder no longer. With our friends at Snaplet, we've released an open source Postgres WASM.

Read the blog post
Comment on Hacker News
Visit the repo: Snaplet | Supabase

Security updates#

We're making some changes to the way the Dashboard interacts with your database. These changes simplify the database permissions so that it's easier for you to migrate in and out of Supabase, and they reduce the security surface area considerably. The change will be applied automatically in November, or you can run it today via the Dashboard.

Review the Security Notice.

Quick product updates#

• Edge functions free plan script size is bumped to 2 MB
  
• functions-go was just contributed to supabase-community by Zain Khan
  
• A new guide to add captcha to your sign-in, sign-up, and password reset forms
  
• New Postgres Extension for monitoring your PostgreSQL database network traffic: pg_netstat
  
• Added docs for how caching works in Supabase

System updates#

All projects#

• PostgREST updated to v9.0.0
• Realtime updated to v0.19.0
• Storage updated to 0.10.0
• GoTrue to v2.2.10

New projects#

• PostgreSQL updated to v14.1

Manual Changes Required#

Update custom auth functions#

Details#

The PostgREST release notes document some changes to the way GUC variables are handled here.

Supabase has created a config flag in the Dashboard to ensure that this will not be a breaking change. These changes are required before you can upgrade to PostgreSQL 14+, or use Realtime RLS.

Supabase has already updated all the default auth functions (auth.uid(), auth.role() and auth.email()), however we have no way of updating functions which we have not written ourselves.

Affected#

• Any project that have custom auth functions or generally any function that use legacy GUC naming convention to access JWT claims (eg current_setting('request.jwt.claims.XXX', true).
  • This change is required for PostgreSQL 14+.
  • This change is required for Realtime row level security

Unaffected#

• New projects
• Existing projects who haven't written custom auth functions.

How to update#

You need to update all functions that are using the legacy GUC naming convention (current_setting('request.jwt.claims.XXX', true)) to use the new convention (current_setting('request.jwt.claims', true)::json->>'XXX').

After you have made this change, you can safely

Example#

For example, Supabase rewrote the auth.role() functions like this, to handle both legacy and new:

Three new Auth providers, multi-schema support, and we're gearing up for another Launch Week. Let's dive into what's been happening at Supabase during the month of October.

This is also available as a blog post and a video demo.

Slack, Spotify, and MessageBird logins#

Thanks to @HarryET and our friends at MessageBird we have 3 new Auth providers this month: Slack, Spotify, and MessageBird phone logins.

Multi-schema support#

Dashboard#

Browse data in any database schema using the Schema switcher in the Dashbaord.

API#

You can access any schema with your API, after enabling access in the Dashboard. Docs.

Fresh Docs and Guides#

We have a TON of new guides, with videos too.

Database Functions#

Learn about PostgreSQL Functions. Docs.

https://youtu.be/MJZCCpCYEqk

Auth Overview#

Learn about all the exciting feature of Auth within Supabase. Docs.

https://youtu.be/6ow_jW4epf8

API Features#

Learn more about the power of PostgREST for RESTful APIs. Docs.

https://youtu.be/rPAJJFdtPw0

And more#

• Redwood Quickstart: https://supabase.io/docs/guides/with-redwoodjs
• Expanded Self-hosting: https://supabase.io/docs/guides/hosting/overview
• Expanded Auth Reference docs with serverside functions.
• "Before you launch" checklist: https://supabase.io/docs/going-into-prod

Community#

There was a lot of activity this month.

Supabase at Jamstack conf#

Supabase attended the Jamstack conf. Watch us catch up with Matt, the cofounder of Netlify (minute 8).

https://youtu.be/phC14xfwvjc

Supabase at Next.js conf#

And Jon made a guest appearance at this year's amazing Next.js Conf.

https://youtu.be/GpXEMB1pDRE

Community Highlights#

• Vue 3 | Workout Tracker App - John Komarnicki video
• Adalo + Supabase - Flywheel Media video
• Nuxt 3 Beta + Supabase - BenCodeZen video
• Made With Supabase (now on Nuxt 3) - Zernonia site
• Nuxt 3 + Tailwind + Supabase - Ekene Eze video
• SQL Functions - Răzvan Stătescu article
• supabase-py v0.0.3 released - repo
• nuxt-supabase v2.2.1 released - repo
• vue-supabase v2.2.3 released - repo

GitHub#

We hit 20K stars!! 21,268 to be exact: github.com/supabase/supabase

Source: repository.surf/supabase

Check out some of our other community stats in our latest Series A Blog Post.

Coming Next: Launch Week III#

We had Launch Week numero uno in March, and the sequel "Launch Week II: the SQL" in July.

Now we're going even bigger with the third installment: Launch Week III: The Trilogy. Join us on 29th November on our Discord.