Key features
- Email and password sign-up / sign-in
- GitHub and Google OAuth
- Magic links
- JWT access tokens read by auth.uid() in policies
- Per-project user list in the dashboard
- Force-logout a session by revoking its token
Technical details
- Token format
- JWT access token
- Providers
- Email/password, GitHub OAuth, Google OAuth, magic link
- Where users live
- Your project's own Postgres schema, not a shared table
- Session revocation
- Every request is checked against a token_version column — forcing logout bumps it, instantly invalidating the old token
- Client library
- dbase-js
Add sign-up and sign-in in minutes