BlocksOrganizations and identity

Support sessions

Let platform staff view the app as a user, time-limited, read-only by default, approved by a second admin and audited.

impersonation lets platform staff view the app as a user. A support session is time-limited and read-only by default, needs is_platform() and a second admin's approval, and lands in the audit log. Your access token hook builds the target user's claims, and security definer writes refuse a read-only session.

better-supabase add impersonation

The Impersonation guide has the setup and the full reference.

Last updated on

Session revocation

Stop a signed-out or banned user's access token from working before it expires.

Reserved slugs

Check a slug's format and length, and keep words like admin, api and www out of workspace URLs.