Supabase Studio: AI Assistant and User Impersonation

https://supabase.com/blog/studio-introducing-assistant

by jacobwg • 3 years ago

7 1 3 years ago

kiwicopple• 3 years ago

hey hn, supabase ceo here

there are a few features in this release. i'm sure the AI Assistant will get a lot of interest, but the one that I think is more technically interesting is the "user impersonation":

Supabase Auth leverages Postgres roles for authorization. We have 2 important roles: `anon` and `authenticated`. After a user is logged in, a JWT is minted like this:

    {
      "sub": "348b-some-user-uuid", // the ID of the user
      "role": "authenticated",      // the Postgres role
      "iss": "supabase"             // the issuer of the JWT
      "exp": 1445385600,            // the time the JWT will expires
    }

we can use this feature in the dashboard to "impersonate" a user. This is especially helpful when you're testing Row Level Security.

we also rolled out wider support for Postgres Roles and a new Realtime inspector where you can "observe" messages on any of the Realtime channels

Supabase Studio: AI Assistant and User Impersonation

Related Stories