SHSelfHostIndex
SU

Supabase Auth

Small JWT-based user authentication API service

Identity & SSO ★ 2.6k stars Medium setup MIT

GoTrue is a lightweight JSON Web Token based authentication API for managing users and sessions, originally from Netlify and extended by Supabase. It is self-hosted as a small Go service.

Official siteSource code

Key features

  • JWT-based auth API
  • Email and OAuth login
  • Lightweight Go service
  • Self-hostable

Strengths

  • Released under the MIT license
  • First-class Docker support for quick deployment
  • Active community (2.6k GitHub stars)
  • Written in Go

Is Supabase Auth secure?

No known vulnerabilities affect Supabase Auth's latest release (v2.197.0). OSV.dev lists 1 past advisory for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-31813, published 2026-03-11 (217 days ago), fixed in 2.185.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

Supabase Auth replaces

Self-hosted Auth0 alternatives

Health badge

Maintain Supabase Auth? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 89 · excellent

Markdown
[![SelfHostIndex health score for Supabase Auth](https://selfhostindex.com/badge/supabase-auth.svg)](https://selfhostindex.com/app/supabase-auth/)
HTML
<a href="https://selfhostindex.com/app/supabase-auth/"><img src="https://selfhostindex.com/badge/supabase-auth.svg" alt="SelfHostIndex health score for Supabase Auth"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/supabase-auth.svg
   :alt: SelfHostIndex health score for Supabase Auth
   :target: https://selfhostindex.com/app/supabase-auth/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Supabase Auth

18 head-to-head comparisons.

Similar identity & sso apps