Supabase integration

Supabase is a platform for storing data, managing sign in, hosting files, and running server logic. The Supabase integration lets you connect your Supabase project to WeWeb so you can use it as a data source and call Supabase features from workflows.

What this integration supports

Once connected, you can:

• Create WeWeb tables that use a Supabase table as the data source.
• Read and update Supabase rows in workflows.
• Upload and retrieve files from Supabase Storage.
• Call Supabase Edge Functions and Postgres functions.
• Use Supabase Auth actions (sign up, sign in, sign out, and OAuth sign in).

WHERE YOU CAN USE SUPABASE ACTIONS

Most Supabase actions are available in both places:

• In Database & APIs workflows (API Endpoints).
• In Interface workflows (for example when a user clicks a button).

This gives you a choice:

• Use an Interface workflow when you want a quick action that happens directly from the app (for example upload a profile picture).
• Use an API Endpoint when you want the safest setup for access control and data rules (recommended for anything sensitive).

Supabase Auth actions like Login, Sign Up, and Login with Provider are only available in Interface workflows.

Setup in Supabase

Before connecting Supabase to WeWeb, make sure you have:

1. A Supabase account.
2. A Supabase project with at least one table (if you want to use it as a data source).
3. The right permissions to connect that project (you’ll be asked to authorize WeWeb).

If you use Supabase Branching, decide which branch you want WeWeb to use (for example main for production).

Connect Supabase in WeWeb

1. Go to the Settings tab.
2. Open Integrations.
3. Select Supabase.
4. Click Add Integration.
5. Click Add connection.
6. Click Connect Supabase, then follow the steps to authorize WeWeb.
7. Select your Project.
8. (Optional) Select a Branch (if your Supabase project uses branches).
9. Select a Secret Key.
   • If you don’t have one yet, choose Create new secret key.
10. (Optional) If you use a Supabase Custom Domain, paste it in Custom Domain.

WeWeb stores the connection settings per environment (for example Editor, Staging, and Production), so you can connect different Supabase projects or branches for each environment.

Use Supabase as a table data source

You can create a WeWeb table that reads and writes data through Supabase.

1. Go to Database & APIs → Tables.
2. Click + Add table.
3. In Select a data source, choose Supabase.
4. Choose the Supabase connection you want to use.
5. Select the Supabase Table.
6. Finish setup.

After setup, WeWeb creates an All Rows view so you can start retrieving data right away.

Depending on your setup choices, WeWeb can also create a set of starter API Endpoints for that table (for example “Get row by ID”, “Create row”, “Update row by ID”, and “Delete row by ID”).

Use WeWeb as an API layer on top of Supabase

Supabase has a feature called Row Level Security (RLS). It can be powerful, but it can also be hard to set up correctly for real apps.

If you prefer, you can keep Supabase as your database, and use WeWeb as the “API layer” that controls access.

One pattern some teams use is:

1. Turn on RLS for your Supabase tables.
2. Don’t add any RLS policies.
   • With no policies, Supabase will block all user access to that table.
3. In WeWeb, create the views and API Endpoints you need on top of those Supabase tables.
4. Secure those views and API Endpoints using WeWeb Security settings (and Middleware workflows if needed).

This works because the Supabase connection in WeWeb includes a Secret Key, so WeWeb can retrieve the data server‑side and then apply your WeWeb security rules before returning anything to the app.

Common pitfalls

The wrong project or environment is connected

If things work in preview but fail in production (or the other way around), check that you connected the right Supabase project and branch for each environment in the connection settings.

“Permission denied” or missing rows

This is usually caused by your Supabase Row Level Security (RLS) setup.

In Supabase, check:

• Whether RLS is enabled for the table.
• Whether you have policies that allow the operation you’re trying to do (select, insert, update, delete).
• Whether the policy conditions match the user you’re testing with.

If RLS feels too complex for your use case, you can keep Supabase as your database and use WeWeb as the layer that secures access instead.

Learn more →

All actions

This integration provides actions you can use in workflows.

Action	Description
Database | Select	Retrieve rows from a Supabase table, with optional filters, sorting, and pagination.
Database | Insert	Insert one or more rows into a Supabase table.
Database | Update	Update one or more rows in a Supabase table (requires filters).
Database | Upsert	Insert rows, or update them if they already exist (based on conflict columns).
Database | Delete	Delete one or more rows from a Supabase table (requires filters).
Storage | List Files	List files inside a Supabase Storage bucket.
Storage | Upload File	Upload a file to Supabase Storage.
Storage | Download File	Download a file from Supabase Storage.
Storage | Update File	Replace an existing file in Supabase Storage.
Storage | Move File	Move/rename a file in Supabase Storage.
Storage | Copy File	Copy a file in Supabase Storage.
Storage | Delete Files	Delete one or more files from Supabase Storage.
Storage | Create Signed URL	Create a time‑limited URL for a private file.
Storage | Get Public URL	Get a public URL for a file in a public bucket (optional image transform).
Call Postgres Function	Call a Postgres function (RPC) in your Supabase project.
Invoke Edge Function	Call a Supabase Edge Function.
Sign up with email	Create a user with email and password (Supabase Auth).
Sign in with email	Sign in a user with email and password (Supabase Auth).
Sign in with provider	Sign in using a social provider configured in Supabase Auth.
Fetch user	Retrieve the currently signed‑in user from Supabase Auth.
Sign out	Sign out the currently signed‑in user from Supabase Auth.
Supabase realtime	Learn how realtime channels, broadcast, presence, and database changes work.

Action details

Select

Retrieve rows from a table, with optional filters, sorting, and pagination.

Inputs

Field	Description
Table	The table to retrieve rows from.
Columns	Which columns to return. Leave empty for all columns.
Filters	Conditions to limit which rows you retrieve.
Order by	Column to sort by.
Direction	Ascending or Descending sorting.
Limit	Maximum number of rows to return.
Offset	Number of rows to skip (useful for pagination).
Single row	Returns one object instead of an array (error if no row found).
Maybe single	Returns one object or null (no error if no row found).
Include count	Optionally include a row count in the response.

Insert

Insert one or more rows into a table.

Inputs

Field	Description
Table	The table to insert into.
Data	Array of row objects to insert. Keys are column names.
Return columns	Which columns to return after insert. Leave empty for all columns.

Update

Update one or more rows in a table.

Inputs

Field	Description
Table	The table to update.
Filters	At least one filter is required (safety measure).
Data	The columns to update and their new values.
Return columns	Which columns to return after update. Leave empty for all columns.

Upsert

Insert rows, or update them if they already exist.

Inputs

Field	Description
Table	The table to upsert into.
Data	Array of row objects to upsert.
On conflict columns	Columns to check for conflicts. Defaults to the primary key if left empty.
Ignore duplicates	If enabled, duplicate rows are ignored instead of updated.
Return columns	Which columns to return after upsert. Leave empty for all columns.

Delete

Delete one or more rows from a table.

Inputs

Field	Description
Table	The table to delete from.
Filters	At least one filter is required (safety measure).
Return columns	Which columns to return from deleted rows. Leave empty for all columns.

List Files

List files in a bucket (optionally inside a folder).

Inputs

Field	Description
Bucket	The bucket to list files from.
Path	Optional folder path inside the bucket.
Limit	Maximum number of files to return.
Offset	Number of files to skip.
Search	Only return files that match this search string.
Sort by	Sort files by name, created date, updated date, or size.

Upload File

Upload a file to a bucket.

Inputs

Field	Description
Bucket	The bucket to upload to.
Path	Full path including filename (for example users/123/avatar.png).
File	The file you want to upload (for example from a file input).
Upsert	Overwrite the file if it already exists.
Content type	File type (MIME type). Usually auto‑detected.
Cache control	Cache duration in seconds.

Download File

Download a file from a bucket.

Inputs

Field	Description
Bucket	The bucket to download from.
Path	Full path to the file.

Update File

Replace an existing file in a bucket.

Inputs

Field	Description
Bucket	The bucket containing the file.
Path	Full path to the existing file to update.
File	The new file content.
Content type	File type (MIME type). Usually auto‑detected.
Cache control	Cache duration in seconds.

Move File

Move (rename) a file in a bucket.

Inputs

Field	Description
Bucket	The bucket containing the file.
From path	Current path of the file.
To path	New path for the file.

Copy File

Copy a file in a bucket.

Inputs

Field	Description
Bucket	The bucket containing the file.
From path	Path of the file to copy.
To path	Destination path for the copy.

Delete Files

Delete one or more files from a bucket.

Inputs

Field	Description
Bucket	The bucket containing the files.
File paths	An array of file paths to delete.

Create Signed URL

Create a time‑limited URL for a file (useful for private buckets).

Inputs

Field	Description
Bucket	The bucket that contains the file.
Path	File path inside the bucket.
Expires in (seconds)	How long the link should work for.
Transform	Optional image resizing/quality options (requires Supabase Pro plan).

Get Public URL

Get a public URL for a file in a public bucket.

Inputs

Field	Description
Bucket	The bucket (must be public).
Path	File path inside the bucket.
Download	If enabled, the URL triggers a download.
Transform	Optional image resizing/quality options (requires Supabase Pro plan).

Call Postgres Function

Call a Postgres function (RPC) from Supabase.

Inputs

Field	Description
Function name	The Postgres function you want to call.
Parameters	Key/value parameters for the function.
Single result	Return a single object instead of an array.

Invoke Edge Function

Call a Supabase Edge Function.

Inputs

Field	Description
Function	The Edge Function to invoke.
Method	HTTP method to use (for example POST).
Body	Data you want to send (for POST, PUT, PATCH).
Custom headers	Optional headers to send with the request.

Login

Sign in a user with email and password (Supabase Auth).

Inputs

Field	Description
Email	The user’s email.
Password	The user’s password.

Sign Up

Create a user with email and password (Supabase Auth).

Inputs

Field	Description
Email	The user’s email.
Password	The user’s password.
User metadata	Optional extra profile data to store on the user.
Email redirect URL	Optional redirect after the user confirms their email.

Login with Provider

Sign in with a social provider configured in Supabase Auth.

Inputs

Field	Description
Provider	The OAuth provider (for example Google or GitHub).
Redirect URL	Where to send the user after sign in.
Scopes	Optional extra scopes (space‑separated).
Query parameters	Optional extra settings to pass to the provider.

Fetch User

Retrieve the currently signed‑in user.

Inputs

This action has no inputs.

Sign Out

Sign out the currently signed‑in user.

Inputs

This action has no inputs.

Reference

Connection settings

Setting	What it means	Where it comes from
Project	Which Supabase project WeWeb should use.	Selected after you authorize WeWeb.
Branch	Which Supabase branch WeWeb should use.	Selected in the connection (only if your project uses branches).
Publishable Key	A key used for safe, public requests.	Filled automatically based on the selected project/branch.
Secret Key	A key used for actions that need higher permissions.	Selected (or created) in the connection.
Custom Domain	A custom API domain for your Supabase project.	Optional value from your Supabase dashboard.

FAQs

Do I need different connections for Editor, Staging, and Production?

It depends. Many teams use separate Supabase projects (or branches) for each environment so tests don’t affect real data. WeWeb lets you set this up in the Supabase connection settings.

Can I keep using Supabase as the source of truth?

Yes. When you create a WeWeb table from Supabase, Supabase remains the data source. WeWeb gives you a way to build views, API Endpoints, and access controls on top.

Where do I set redirect URLs for Supabase OAuth sign in?

If you use Login with Provider, set the Redirect URL in the action. This is the page you want the user to land on after they finish signing in.

CONTINUE LEARNING

Browse all available integrations and learn how connections work.

Intro to integrations →