
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
create-next-supaauth
Advanced tools
Create a new project with one command:
npx create-next-supaauth my-app
Navigate to your project:
cd my-app
Update your environment variables in .env.local with your Supabase credentials:
NEXT_PUBLIC_SUPABASE_URL=your-supabase-url
NEXT_PUBLIC_SUPABASE_ANON_KEY=your-anon-key
Start the development server:
npm run dev
Visit http://localhost:3000 to see your app in action! 🎉
You can deploy this project directly to Vercel with the following steps:
Create a Supabase project at https://supabase.com if you haven't already.
Get your Supabase URL and anon key from your Supabase project dashboard.
Click the "Deploy to Vercel" button at the top of this README or use the button below.
In the Vercel deployment form, enter your Supabase credentials:
NEXT_PUBLIC_SUPABASE_URL: Your Supabase project URLNEXT_PUBLIC_SUPABASE_ANON_KEY: Your Supabase project anon/public keyClick "Deploy" and wait for the deployment to complete.
You can also deploy this project directly to Netlify with these simple steps:
Create a Supabase project at https://supabase.com if you haven't already.
Get your Supabase URL and anon key from your Supabase project dashboard.
Click the "Deploy to Netlify" button at the top of this README or use the button below.
In the Netlify deployment form, enter your Supabase credentials:
NEXT_PUBLIC_SUPABASE_URL: Your Supabase project URLNEXT_PUBLIC_SUPABASE_ANON_KEY: Your Supabase project anon/public keyClick "Save & Deploy" and wait for the deployment to complete.
Your application will be deployed and accessible through a Vercel or Netlify URL. You can then configure custom domains and other settings in your respective dashboard.
This project requires the following environment variables to function properly:
| Variable | Description | Where to Find |
|---|---|---|
NEXT_PUBLIC_SUPABASE_URL | The URL of your Supabase project | Supabase Dashboard → Project Settings → API → Project URL |
NEXT_PUBLIC_SUPABASE_ANON_KEY | The anonymous key for your Supabase project | Supabase Dashboard → Project Settings → API → Project API Keys → anon/public |
These variables are necessary for the authentication system to communicate with your Supabase backend.
SupaAuth is designed to be beginner-friendly while maintaining professional standards. Here's what you'll learn:
src/
├── app/ # Pages and layouts
│ ├── auth/ # Authentication pages (signin, signup, reset-password)
│ ├── dashboard/ # Protected dashboard
│ └── layout.tsx # Root layout
├── components/ # Reusable UI components
├── contexts/ # React Context providers
├── lib/ # Utility functions
├── styles/ # Global styles
└── types/ # TypeScript definitions
UI Customization
src/styles/globals.csssrc/components/layout/Route Protection
src/middleware.tsFeature Extension
src/app/dashboard/page.tsxWe welcome contributions! Here's how you can help:
git checkout -b feature/AmazingFeature)git commit -m 'Add some AmazingFeature')git push origin feature/AmazingFeature)This project is licensed under the MIT License - see the LICENSE file for details.
FAQs
A CLI to create Next.js projects with Supabase authentication
The npm package create-next-supaauth receives a total of 0 weekly downloads. As such, create-next-supaauth popularity was classified as not popular.
We found that create-next-supaauth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.