
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@mastra/auth-supabase
Advanced tools
Affected versions:
A Supabase authentication integration for Mastra, providing seamless authentication and authorization capabilities using Supabase's authentication system.
npm install @mastra/auth-supabase
# or
yarn add @mastra/auth-supabase
# or
pnpm add @mastra/auth-supabase
import { Mastra } from '@mastra/core/mastra';
import { MastraAuthSupabase } from '@mastra/auth-supabase';
// Initialize with environment variables
const supabaseAuth = new MastraAuthSupabase();
// Or initialize with explicit configuration
const supabaseAuth = new MastraAuthSupabase({
url: 'your-supabase-url',
anonKey: 'your-supabase-anon-key',
});
// Enable auth in Mastra
const mastra = new Mastra({
...
server: {
auth: supabaseAuth,
},
});
The package can be configured in two ways:
Environment Variables:
SUPABASE_URL: Your Supabase project URLSUPABASE_ANON_KEY: Your Supabase anonymous keyConstructor Options:
interface MastraAuthSupabaseOptions {
url?: string;
anonKey?: string;
}
authenticateToken(token: string)Authenticates a user token and returns the user information if valid.
authorizeUser(user: User)Checks if a user has the required permissions (currently checks for admin status).
FAQs
Mastra Supabase Auth integration
The npm package @mastra/auth-supabase receives a total of 7,325 weekly downloads. As such, @mastra/auth-supabase popularity was classified as popular.
We found that @mastra/auth-supabase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.