RLS with Supabase and Auth0

[logemann]

Having an webapp architecture already in place with auth0 as provider. Is there an easy non-server way to use the access_token from Auth0 and pass it to supabase js client lib? I could enrich the access_token via Auth0 actions to include certain fields supabase expects in the token or what is the best approach to this?

Thanks.

[logemann]

trying to get an Idea how JWTs exactly work with Supabase. Getting closer but i dont get why this RLS policy doesnt work when trying to add it, See Screenshot.

[logemann]

error on SQL console when trying to create the policy is:
operator does not exist: uuid = character varying

[thomasgrastein]

Hey @logemann
Not sure about integrating Auth0, but the issue you're facing with the policy seems to be related to comparing uuid with varchar. In your public.user table, the user_id should be of type uuid to properly relate to the uuid of the auth.users table.

[logemann]

@thomasgrastein thanks. That was the reason. Another problem that arise is that Auth0 doesnt use UUID in the "sub" :-) And having looked at Hasura JWT handling... They are better in a way that i dont need custom Tokens because i can supply them my JWK (signing key) which i get from Auth0.

With Supabase, the JWK is fixed and forces me to create a custom token based on that signing key. At least thats what it looks like.