supabase-fullstack-setup

Configure social provider authentication by setting up OAuth credentials in Supabase, then use the Supabase client in Next.js server and browser contexts to handle sign-in flows. The Skill covers provider integration, environment variable setup, and secure credential management for production Next.js 13+ apps.

Row Level Security enforces database-level access control so users can only query their own data. RLS policies in Supabase use authentication context to automatically filter queries, preventing unauthorized data access and enabling secure multi-tenant architectures without application-layer filtering.

Enable real-time subscriptions by configuring Supabase's broadcast channel or listening to database changes using the client library. This Skill covers setting up subscription handlers in Next.js components and managing live data synchronization for reactive user interfaces.

Yes. Supabase works with App Router by bootstrapping separate server and browser clients. The Skill provides patterns for server-side data fetching in layouts and pages, client-side queries in components, and secure environment variable management across both contexts.

Production patterns include implementing Row Level Security for data isolation, managing authentication state securely, configuring rate limiting and audit logs, and separating server and browser Supabase client initialization. This Skill covers all patterns required for scalable, secure multi-user applications.

Environment variables separate the Supabase URL and public key from service role keys. This Skill covers configuring `.env.local` for development and production deployments, ensuring browser clients use public keys and server-side code uses service role keys for secure data access.