hey hn, supabase ceo here<p>there are a few features in this release. i'm sure the AI Assistant will get a lot of interest, but the one that I think is more technically interesting is the "user impersonation":<p>Supabase Auth leverages Postgres roles for authorization. We have 2 important roles: `anon` and `authenticated`. After a user is logged in, a JWT is minted like this:<p><pre><code> {
"sub": "348b-some-user-uuid", // the ID of the user
"role": "authenticated", // the Postgres role
"iss": "supabase" // the issuer of the JWT
"exp": 1445385600, // the time the JWT will expires
}
</code></pre>
we can use this feature in the dashboard to "impersonate" a user. This is especially helpful when you're testing Row Level Security.<p>we also rolled out wider support for Postgres Roles and a new Realtime inspector where you can "observe" messages on any of the Realtime channels