Supabase is an open source Firebase alternative. Start your project with a Postgres database, Authentication, instant APIs, Edge Functions, Realtime subscriptions, and Storage.

Supabase

I checked the doc of goTrue as well,  but nothing, just some ways to generate a new jwt or refresh it using the refresh token

nothing about revoke a JWT and no mention of where supabase save the jwt generated

if someone know where the JWT are stored I can find a way to make an revoke function by myself ❤️

<@!764524500162445402> do u have any idea about this?

maybe I found a solution:

Make a table with UID and date of revoke
Decode the jwt from server side and check if the UID is in the table and check if the "IAT" data  is lower then the revoke data

if yes then force the user to login again

You need to keep a blacklist of tokens if you want to stop them from being used

how u can do it if the JWT are not stored on supabase DB?

the only parameters I see usefull to realize a Revoke JWT Functionality are:

UUID
Date

the scenarios are:

I need revoke the JWT of a specific user
I need revoke all JWT are generated before a date


The supabase DB store only refresh token, so looking this fact, the only way to make this is:

Make a table where I set the parameters of "Blacklist" so UUID / Date
At the connection decode the JWT and check the UUID / IAT

(sorry for my english) if someone see other ways to realize it, or know where are stored the JWT, I will be happy to know it 🙂

You can store the JWT no? Like once it's authed you can insert it into a table.

yes of course but in a project already up... can't be done, I mean this kind of implementation will block only the JWT stored the previous will be still work

It's also why it makes sense to use short at but long rt

Please create threads when having conversations on the same topic as its easier to follow

Regarding self-hosting, is it possible to run two independent supabase stacks using docker-compose, it doesn't matter how hard I try but they overlap each other even using different ports, etc.

Is actually running them in different machines the only option?

Hi everyone. anyone around who might be able to provide a little nudge?

Is there any way to retrieve a user record by email address after it has been created using `.createUser`?

Here we go: https://github.com/supabase/supabase/issues/4715#issuecomment-1041032392

Hello everybody, is it possible to attach/add/pass meta-data to the auth.signin method, similar to the auth.signup? Or is it a bad idea in general?

I'm generating types using open-api npx command, does anyone have a strategy for managing types when querying foreign tables. I'm currently creating custom for these

I encountered the same issue and did the same as you tbh.
I also looked at other tools to generate typescript types from postgres and they all seem to reach that same conclusion

It seems very hard to understand and generate, even more to make TS Server understand that you're making a join, so none of the ones I found seem to support that nicely...

Yeah that makes sense. I saw in the supabase site that they are building their own tools for generating types. Excited to see how that will work

Thanks for taking the time to respond

Oh I didn't see that actually, that sounds exciting!

Im getting a page can not be found in the docs

I'm having trouble with this query ```SELECT
    sja.segment,
    sjct.constraint_type,
    sjac.constraint_value,
    relation,
    sja.segment,
    sjct.constraint_type,
    sjac.constraint_value
FROM signal_journey_audience_constraint_relations
JOIN signal_journey_audiences sja ON signal_journey_audience_constraint_relations.audience_id = sja.audience_id
JOIN signal_journey_audience_constraints sjac ON signal_journey_audience_constraint_relations.constraint_id = sjac.constraint_id
JOIN signal_journey_constraint_type sjct ON sjac.constraint_type_id = sjct.constraint_type_id
```

You can wrap that query in a function and call it through rpc: https://supabase.com/docs/reference/javascript/rpc

I can't seem to figure out how to do with supabase

The docs have old content in the search etc... so a lot of page are 404s :/

Hello, how could I edit the info that is being send in the access token?

Because I would like to add some things I need

anyone working on metamask auth/web3 auth for supabase?

hello! can anyone suggest how should I write types for useState after I receive data?