Changelog
New updates and product improvements
33 results
Self-hosted Supabase's default API_EXTERNAL_URL now includes /auth/v1 from the week of 2026-07-06. SAML SSO users must repoint their IdP to the new /auth/v1/sso/saml/* endpoints.
Supabase's June developer update: $500M Series F led by GIC, Auth passkeys in beta, the Supabase ChatGPT app, the Supabase plugin for AI coding agents, and Multigres 0.1 alpha released.
Supabase's May developer update: custom OAuth/OIDC providers for Auth, ISO 27001 certification, @supabase/server SDK, branching without Git by default, plus Data API auto-exposure changes.
Developer Update for December 2025: Supabase ETL, Analytics and Vector Buckets, iceberg-js, Supabase Platform, OAuth 2.1 provider, Kiro integration, and AWS Marketplace listing.
Supabase Auth adds email templates for security-sensitive account changes: password, email, phone, identity link or unlink, and MFA enrollment. Enable via Feature previews.
Supabase Auth gains OAuth 2.1 authorization server capabilities (Public Beta), turning your project into an identity provider for third-party apps and MCP clients.
On 2025-04-21 Supabase restricts SQL on the auth, storage, and realtime schemas: no creating or dropping tables or functions, no writes to migration tables. Move custom objects elsewhere.
Supabase developer update for January 2025: third-party Auth with Firebase reaches GA, stacked log charts highlight errors, supabase-js gains JSON type inference and stricter filter type validation.
The Slack v1 OAuth provider in Supabase Auth is deprecated in favour of the new Slack (OIDC) provider. Migrate before 2025-01-15, when the legacy provider is removed from the dashboard.
Dashboard updates: Auth email templates now run a SpamAssassin-powered spam check, plus sorting users by last sign-in and a Storage fix for the Developer role.
From 2024-09-26, Supabase Auth's default email provider sends only to organization members. Projects relying on default email auth must configure custom SMTP or a Send Email Auth Hook.
August 2024 developer update recaps Launch Week 12: postgres.new in-browser Postgres with an AI interface, Realtime Broadcast and Presence authorization, and Log Drains.
Supabase Auth is adding asymmetric JWT signing keys with a public JWKs endpoint and a new getClaims() method. Projects created after 2025-05-01 default to RSA asymmetric keys.
May 2024 Developer Updates from Consolidation Month: the new @supabase/ssr package, pgvector v0.7.0 with float16 vectors, Edge Functions memory fixes, and standardized Realtime error codes.
The @supabase/ssr package moves to its own repo and a v0.4 reimplementation in mid-June 2024, with a new getAll/setAll cookie API. The current API will be deprecated at v1.0.0.
April 2024 Developer Updates: Supabase reaches General Availability, plus Edge Functions AI model support, Auth anonymous sign-ins, Storage S3 protocol, and Security and Performance Advisors.
Dashboard weekly roll-up from GA Week: Auth anonymous sign-ins, Storage S3 protocol support, new Security, Performance, and Index Advisors, and four new foreign data wrappers.
Supabase August 2021 update: closed a $30M Series A, opened the WALRUS RLS-for-Realtime RFC, launched the Seoul region, and added custom SMS templates to Auth.
Supabase July 2021 update: Launch Week II ships Auth v2 with phone OTP, Storage Beta with public buckets and streaming, Dashboard v2, and Postgres 13 for new projects.
Supabase June 2021 update: Vercel integration, Discord OAuth login, public Storage buckets and upserts, a Table Policy editor, and new guides for Postgres Full-Text Search and OAuth.
Supabase October 2021 update: Slack, Spotify, and MessageBird Auth providers, multi-schema support in the Dashboard and API, plus new Database Functions and Auth guides.
Supabase January 2023 update: pgvector ships for storing OpenAI embeddings, Supabase Clippy launches docs search, and pg_graphql adds Views, Materialized Views, and Foreign Tables.
Supabase September 2022 update: three Kaizen weeks close 250+ issues, Auth UI launches on Product Hunt, and an open-source Postgres WASM ships with Snaplet.
Supabase September 2023 update: Realtime broadcast via REST, Supavisor pooling on all new projects, the Airtable Foreign Data Wrapper, and HNSW support in the Vecs Python client.
Supabase November 2021 platform update: PostgREST 9.0, Realtime 0.19.0, Storage 0.10.0, GoTrue 2.2.10, and Postgres 14.1 for new projects. Custom auth functions need updating for PG14.
Supabase April 2023 Launch Week 7: open-source Supabase Logs, self-hosted Edge Runtime, Storage v3 with resumable 50GB uploads, SSO in Auth, Studio 2.0, and dbdev for Postgres packages.
Supabase June 2023 update: native Sign in with Apple and Google in Auth, Kakao OAuth, a revamped billing experience in Studio, and a wave of CLI features for migrations and functions.
Supabase May 2023 update: Supabase Vector toolkit launches, the Vault encrypted-secrets extension reaches all projects, and Next.js Auth Helpers add full App Router support with PKCE.
Supabase November 2022 update: Remix Auth Helpers ship with supabase-js v2 and TypeScript support, plus a new Edgy Edge Functions video series and three new function examples.
Supabase October 2022 update: supabase-js v2 and supabase-flutter v1 ship, the Next.js quickstart adopts Next.js 13, pgTAP database testing lands, and Edge Functions add GET/PUT/PATCH/DELETE.
Supabase October 2023 update: @supabase/ssr launches for Next.js 14 server-side auth, pgvector outperforms Pinecone in benchmarks, and MFA arrives for Supabase Studio accounts.
Supabase September 2021 update: AbortController support in supabase-js for long-running queries, improved Table Editor column types and unique constraints, and revamped Auth docs.
Supabase Auth deprecates the LinkedIn OAuth provider in favor of LinkedIn (OIDC). Projects using a pre-1 Aug 2023 LinkedIn app must migrate credentials by 4 Jan 2024.