Supabase integration with other features?

[f-gueguen]

Hello, and sorry for the (maybe) stupid question.

If I use lucia with supabase, how should I use the other supabase features? For example let's say I want to send a query to my DB, if I create a supabase client will it recognize my authentification out of the box and use it for the query? It would sound a bit magical and I have no idea how to link this authentification with a "normal" supabaseClient :/

In any case, thank you so much for your work.

[f-gueguen]

Of course I find a clue by myself right after posting, while I didn't find it before...

Using supabase, you can supabase.auth.setAuth(youToken)
Which should basically solves it.

[pilcrowonpaper]

In general, you should create API endpoints to validate the token and query the data, rather than querying it directly in the client. Though, it’s good to know you can use custom token with Supabase. But, I’m not sure if the token has to be created using your Supabase project JWT secret.

[f-gueguen]

I agree about the API part, what I end up doing was wrapping my sveltkit form actions and endpoints in a middleware:

type Args = {
	accessToken?: string;
	redirectTo?: string;
	status?: number;
	message?: string;
};

export const withApiAuth: (args: Args, fn: CallableFunction) => Response = (
	{ redirectTo, accessToken, status = 307, message },
	fn
) => {
	if (accessToken && fn instanceof Function) {
		supabaseClient.auth.setAuth(accessToken);
		return fn();
	}

	if (redirectTo) {
		throw redirect(status, redirectTo);
	}

	return new Response(
		JSON.stringify({
			message: message ?? 'Valid user required',
			status
		})
	);
};

form actions:

export const actions: Actions = {
	importCatalog: async ({ request, locals }) =>
		withApiAuth({ accessToken: locals.accessToken }, async () => {
			// action code

endpoints:

export const GET: RequestHandler = ({ locals }) =>
	withApiAuth({ accessToken: locals.accessToken }, async () => {
		// endpoint code

So that I just don't have to think about it.
For now I was using the supabase auth helper (which is very buggy and outdated, to say the least), so I'm thinking about switching to lucia, let's see if it requires the supabase project JWT secret as you mentioned!

In any case, thank you for your prompt reply 👍