Allow OAuth App integrations to access more than just Management APIs

[mrmartineau]

As I understand it, the OAuth app integration (based on these docs) only allows connected users to access the management APIs (e.g. projects/orgs etc) and not to access my database/storage etc.

For context, I would like to allow users of my Raycast extension to connect with Supabase using Raycast's OAuth flow (docs here). I have successfully setup everything but at the last hurdle I discovered that the access_token from the OAuth exchange is not a user's JWT or access token that I can use to pass to the createClient method, instead the tokens from the OAuth flow look like this:

{
  expiresIn: 86400,
  providerName: 'Otter',
  providerId: 'otter',
  accessToken: 'sbp_oauth_2c2b1fc0b8c1e4d02b56f71df35608c848aXXXXX',
  refreshToken: 'qxXQFLLRCSNTmZhXXX',
  updatedAt: 2023-11-22T13:42:01.000Z,
  isExpired: [Function (anonymous)]
}

If it's of interest, the relevant code in my app ("Otter" - a bookmarking app built on Supabase & Nextjs 14) is here: https://github.com/mrmartineau/Otter/pull/4/files

And the relevant code for my Raycast extension is here: https://github.com/mrmartineau/raycast-extensions/pull/3/files

FYI I @GaryAustin1 has already discussed this with me in Discord: https://discordapp.com/channels/839993398554656828/1176971037292892291