
Product
Introducing Repository Access Permissions and Custom Roles
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
@mastra/auth-supabase
Advanced tools
Affected versions:
A Supabase authentication integration for Mastra, providing seamless authentication and authorization capabilities using Supabase's authentication system.
npm install @mastra/auth-supabase
# or
yarn add @mastra/auth-supabase
# or
pnpm add @mastra/auth-supabase
import { Mastra } from '@mastra/core/mastra';
import { MastraAuthSupabase } from '@mastra/auth-supabase';
// Initialize with environment variables
const supabaseAuth = new MastraAuthSupabase();
// Or initialize with explicit configuration
const supabaseAuth = new MastraAuthSupabase({
url: 'your-supabase-url',
anonKey: 'your-supabase-anon-key',
});
// Enable auth in Mastra
const mastra = new Mastra({
...
server: {
auth: supabaseAuth,
},
});
The package can be configured in two ways:
Environment Variables:
SUPABASE_URL: Your Supabase project URLSUPABASE_ANON_KEY: Your Supabase anonymous keyConstructor Options:
interface MastraAuthSupabaseOptions {
url?: string;
anonKey?: string;
}
authenticateToken(token: string)Authenticates a user token and returns the user information if valid.
authorizeUser(user: User)Checks if a user has the required permissions (currently checks for admin status).
FAQs
Mastra Supabase Auth integration
The npm package @mastra/auth-supabase receives a total of 3,723 weekly downloads. As such, @mastra/auth-supabase popularity was classified as popular.
We found that @mastra/auth-supabase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.