supabase-test

To test Supabase Row Level Security policies, you can write pure TypeScript tests using Vitest or Jest that simulate anon and authenticated users against an isolated PostgreSQL database to verify authorization rules.

The best way to isolate PostgreSQL database tests is to use ephemeral database instances, ensuring each test runs with a fresh database state for instant test independence and reliable data integrity verification.

Yes, you can simulate multiple concurrent users with different permissions in a Supabase test by interacting directly with the database using both superuser and user clients to verify multi-user RLS scenarios.

Yes, the supabase-test skill works with direct Postgres access to provide instant test isolation and CI-ready environments, allowing you to verify robust authorization and data integrity directly in your pipeline.

No, you do not need an existing PostgreSQL database to run Supabase RLS tests because the framework automatically provisions ephemeral databases for each test, ensuring a completely isolated and fresh environment.

A limitation of testing Supabase apps with ephemeral databases is that each test spins up a fresh instance, which may increase execution overhead for large test suites while guaranteeing strict test isolation.