BlocksOrganizations and identity
Session revocation
Stop a signed-out or banned user's access token from working before it expires.
sessions installs session_active() for restrictive policies. It returns
false once the caller's session was signed out or expired, or the user was
banned or deleted, so a revoked access token stops working right away
instead of at its expiry. The policies option writes the restrictive policy
on every table.
better-supabase add sessionsThe Sessions guide has the setup and the full reference.
Last updated on