This page focuses on Supabase Auth's OpenID Connect protocol support. Looking for Supabase Auth’s (C)IAM features like MFA, SSO, and user management? View Supabase Auth on the (C)IAM Identity Providers benchmark.

Supabase Auth OpenID Connect Provider

🇺🇸

Open-source Postgres-native authentication backed by GoTrue. 50K MAU free tier, self-hostable on any infrastructure, and tightly integrated with the Supabase platform (database, storage, edge functions). Row Level Security is the authorization primitive.

Features

Grant Types

Extensions

Endpoints

Token Endpoint Authentication Methods

none
client_secret_basic
client_secret_post
client_secret_jwt
private_key_jwt
tls_client_auth

Prompts

Features

Financial-grade API (FAPI)

If you want to compare OpenID Connect features of different providers, please check out the OpenID Connect Providers benchmark.

Looking for Supabase Auth’s (C)IAM features like MFA, SSO, and user management? View Supabase Auth on the (C)IAM Identity Providers benchmark.

Frequently Asked Questions

Does Supabase Auth support the Authorization Code grant type?

Supabase Auth supports Authorization Code grant type. Provided by the Supabase Auth OAuth 2.1 server, which is in beta.

Does Supabase Auth support the Refresh Token grant type?

Supabase Auth supports Refresh Token grant type.

Does Supabase Auth support the Client Credentials grant type?

Supabase Auth does not support Client Credentials grant type. The OAuth 2.1 server only issues authorization code and refresh token grants.

Does Supabase Auth support the Implicit grant type?

Supabase Auth does not support Implicit grant type.

Does Supabase Auth support the Token Exchange grant type?

Supabase Auth does not support Token Exchange grant type.

Does Supabase Auth support the Client Initiated BackChannel Authentication grant type?

Supabase Auth does not support Client Initiated BackChannel Authentication grant type.

Does Supabase Auth support the Device Authorization Grant grant type?

Supabase Auth does not support Device Authorization Grant grant type.

Does Supabase Auth support the JWT Bearer Token grant type?

Supabase Auth does not support JWT Bearer Token grant type.

Does Supabase Auth support the SAML 2.0 Bearer Assertion grant type?

Supabase Auth does not support SAML 2.0 Bearer Assertion grant type.

Does Supabase Auth support the Resource Owner Password Credentials grant type?

Supabase Auth does not support Resource Owner Password Credentials grant type. Not available on the OAuth 2.1 server token endpoint. Supabase's own password sign-in is a separate API.

Does Supabase Auth support the PKCE extension?

Supabase Auth supports PKCE extension.

Does Supabase Auth support the PAR extension?

Supabase Auth does not support PAR extension.

Does Supabase Auth support the JAR extension?

Supabase Auth does not support JAR extension.

Does Supabase Auth support the Authorization Endpoint endpoint?

Supabase Auth supports Authorization Endpoint endpoint.

Does Supabase Auth support the Token Endpoint endpoint?

Supabase Auth supports Token Endpoint endpoint.

Does Supabase Auth support the UserInfo Endpoint endpoint?

Supabase Auth supports UserInfo Endpoint endpoint.

Does Supabase Auth support the Token Revocation endpoint?

Supabase Auth does not support Token Revocation endpoint. Users revoke an application's access through the grants API instead.

Does Supabase Auth support the Token Introspection endpoint?

Supabase Auth does not support Token Introspection endpoint.

Does Supabase Auth support the Device Authorization Endpoint endpoint?

Supabase Auth does not support Device Authorization Endpoint endpoint.

Does Supabase Auth support the OpenID Connect Discovery Endpoint endpoint?

Supabase Auth supports OpenID Connect Discovery Endpoint endpoint.

Does Supabase Auth support the OAuth 2.0 Authorization Server Metadata Endpoint endpoint?

Supabase Auth supports OAuth 2.0 Authorization Server Metadata Endpoint endpoint. Served at /.well-known/oauth-authorization-server/auth/v1 when the OAuth server is enabled.

Does Supabase Auth support the none token endpoint authentication method?

Supabase Auth supports none token endpoint authentication method. Public clients.

Does Supabase Auth support the client_secret_basic token endpoint authentication method?

Supabase Auth supports client_secret_basic token endpoint authentication method. Default for confidential clients.

Does Supabase Auth support the client_secret_post token endpoint authentication method?

Supabase Auth supports client_secret_post token endpoint authentication method.

Does Supabase Auth support the client_secret_jwt token endpoint authentication method?

Supabase Auth does not support client_secret_jwt token endpoint authentication method.

Does Supabase Auth support the private_key_jwt token endpoint authentication method?

Supabase Auth does not support private_key_jwt token endpoint authentication method.

Does Supabase Auth support the tls_client_auth token endpoint authentication method?

Supabase Auth does not support tls_client_auth token endpoint authentication method.

Does Supabase Auth support the none prompt?

Supabase Auth does not support none prompt.

Does Supabase Auth support the login prompt?

Supabase Auth does not support login prompt.

Does Supabase Auth support the consent prompt?

Supabase Auth does not support consent prompt.

Does Supabase Auth support the select_account prompt?

Supabase Auth does not support select_account prompt.

Does Supabase Auth support the create prompt?

Supabase Auth does not support create prompt.

Does Supabase Auth support the RP-initiated Logout feature?

Supabase Auth does not support RP-initiated Logout feature.

Does Supabase Auth support the Dynamic Client Registration Protocol feature?

Supabase Auth supports Dynamic Client Registration Protocol feature.

Does Supabase Auth support the Dynamic Client Registration Management Protocol feature?

Supabase Auth does not support Dynamic Client Registration Management Protocol feature. Clients are managed through the admin API, not RFC 7592.

Does Supabase Auth support the Refresh Token Rotation feature?

Supabase Auth supports Refresh Token Rotation feature. Shared with Supabase Auth sessions through the refresh token rotation setting.

Does Supabase Auth support the Refresh Token Rotation Grace Period feature?

Supabase Auth supports Refresh Token Rotation Grace Period feature. Controlled by the refresh token reuse interval setting.

Does Supabase Auth support the OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature?

Supabase Auth does not support OAuth 2.0 Demonstrating Proof of Possession (DPoP) feature.

Does Supabase Auth support the FAPI 1.0 Security Profile - Part 1: Baseline feature?

Supabase Auth does not support FAPI 1.0 Security Profile - Part 1: Baseline feature.

Does Supabase Auth support the FAPI 1.0 Security Profile - Part 2: Advanced feature?

Supabase Auth does not support FAPI 1.0 Security Profile - Part 2: Advanced feature.

Does Supabase Auth support the FAPI 2.0 Security Profile feature?

Supabase Auth does not support FAPI 2.0 Security Profile feature.

Does Supabase Auth support the FAPI 2.0 Message Signing feature?

Supabase Auth does not support FAPI 2.0 Message Signing feature.

Does Supabase Auth support the JARM feature?

Supabase Auth does not support JARM feature.

Compare with other providers

Supabase Auth vs Keycloak Supabase Auth vs Ping Identity Supabase Auth vs Authlete Supabase Auth vs Curity Supabase Auth vs Gluu Supabase Auth vs Okta Supabase Auth vs Auth0 Supabase Auth vs Duende IdentityServer Supabase Auth vs Zitadel Supabase Auth vs Ory Supabase Auth vs Better Auth Supabase Auth vs Spring Security Supabase Auth vs Authelia Supabase Auth vs authentik Supabase Auth vs Microsoft Entra External ID Supabase Auth vs FusionAuth Supabase Auth vs CyberArk Identity Supabase Auth vs Descope Supabase Auth vs Amazon Cognito Supabase Auth vs Kinde Supabase Auth vs WorkOS Supabase Auth vs Logto Supabase Auth vs Stytch Supabase Auth vs SAP CIAM Supabase Auth vs Clerk Supabase Auth vs SuperTokens Supabase Auth vs Memority Supabase Auth vs Frontegg Supabase Auth vs Purse Identity Supabase Auth vs SailPoint Identity Security Cloud Supabase Auth vs Evidian Supabase Auth vs Firebase Authentication

Note: The current data is based on provider documentation/experience and may not be 100% accurate.