Supabase (Authentication System)

Supabase can be used as an Authentication System in WeWeb. This is a good choice if your app already uses Supabase for data, or if you want a hosted authentication solution.

What this system supports

• Sign in methods provided by Supabase Auth (email/password, magic links, and OAuth providers configured in Supabase)
• Sessions managed by Supabase
• User display and basic user management inside WeWeb

Set up Supabase

1) Create a Supabase connection

1. Go to Data & API → Authentication.
2. • A) If this is your first time opening the Authentication area, choose Supabase when prompted.
   • B) If this is not your first time, open Configuration, click Switch authentication system, then select Supabase.
3. When asked for a Connection, create or select a Supabase connection for the current environment.

In the connection setup, WeWeb stores the Supabase values as environment variables (so you can use different projects per environment).

2) Fill in the connection fields

In the Supabase connection, you’ll typically set:

• Access token
• Refresh token
• Project (Project reference)
• Branch (Optional; default is the main project)
• Publishable key
• Secret key
• Custom domain (Optional)

Test sign in

1. In the Interface tab, create a login flow using Supabase authentication actions.
2. Preview and sign in with a test account.
3. Confirm the user is authenticated and that protected pages/endpoints behave as expected.

For page and API protection, see Users and roles →.

Common pitfalls

It works in one environment but not another

Make sure each environment has the correct Supabase project selected and keys saved.

Email sign up does not work for external users

Supabase can restrict auth emails until you configure an email provider (SMTP) in Supabase. If sign up emails are not being delivered, check your Supabase Auth email settings.

Reference

Connection fields

Field	Description	Where to find it
Access token	Token used to access your Supabase account	Supabase account settings
Refresh token	Token used to refresh the access token	Supabase account settings
Project	The Supabase project to use	Supabase dashboard
Branch	Project branch reference (if using branching)	Supabase dashboard
Publishable key	Public API key used by the app	Supabase dashboard (API keys)
Secret key	Secret API key	Supabase dashboard (API keys / secrets)
Custom domain	Custom API domain (optional)	Supabase custom domains