Extensions · Updated 2026-08-05
Supabase
Integrate Supabase for authentication and database management.
Supabase Integration
Orbit comes with built-in support for Supabase, allowing you to easily add authentication and cloud data storage to your projects.
Connectivity
Fullstack builds provision a shared-pool Supabase project with schema-per-app isolation. The harness injects VITE_SUPABASE_URL, VITE_SUPABASE_ANON_KEY, and VITE_SUPABASE_SCHEMA into the app's .env.local, so the generated client connects to your app's schema automatically.
Key Integration Points
- Authentication: Seamless sign-in and sign-up flows using Supabase GoTrue with client-side profile upsert.
- RLS Management: Baseline row-level security policies are created with every table; you can audit and update them from the Orbit Cloud panel.
- Data Sync: Real-time database updates reflected in your live preview.
- Edge Functions & Storage: Prefixed app resources deployed and managed from the panel.
A Typical Build
When you ask for a multi-tenant SaaS, Orbit creates a profiles table linked to auth users, an organizations table with an invite model, and domain tables such as projects or orders — each with row-level security scoped to the authenticated user's organization. A realtime listener syncs table changes to the UI, and a seed script populates starter data. The entire schema is generated, migrated, and versioned inside your project, so you can inspect the SQL and adjust policies before going live.
Managing Your Database
After the build, the Orbit Cloud panel is your control surface. From it you can browse live tables, run ad-hoc SQL, create and review migrations, deploy edge functions, manage storage buckets, and rotate secrets. Guarded agent tools such as supabase_run_sql, supabase_create_rls_policy, supabase_deploy_edge_function, and supabase_set_secret let the AI evolve the schema safely while the panel stays the source of truth.
Deployment & Security
Orbit's Supabase tooling exposes guarded tools — supabase_run_sql, supabase_create_rls_policy, supabase_deploy_edge_function, supabase_create_storage_bucket, supabase_set_secret — so the agent can evolve your schema safely. Security scans flag service_role keys or Stripe secrets that leak into client paths.
Frequently asked questions
Does Orbit support Supabase?
Yes. Fullstack builds provision a schema-isolated Supabase project automatically — tables with baseline RLS, PostgREST schema registration, storage buckets, and edge functions. The app client is created with VITE_SUPABASE_URL, VITE_SUPABASE_ANON_KEY, and VITE_SUPABASE_SCHEMA injected by the harness.
How does Orbit handle Supabase auth?
Orbit uses Supabase's shared GoTrue auth with client-side profile upsert. OAuth provider toggles are restricted on the shared pool; email/password auth is always available.
Can I manage my app's database after the build?
Yes. The Orbit Cloud panel gives you live tables, SQL, migrations, edge functions, storage buckets, and secrets management for every fullstack app you build.