Supabase Introduces Multi-factor Authentication
Dec 14th, 2022Product
-
Supabase has released Multi-factor Authentication (MFA) to enhance security for user applications.
-
The MFA implementation includes support for Time-Based One-Time Passwords (TOTP) using QR codes or manual secret entry.
-
MFA flow consists of an enrollment procedure to exchange a secret key and a verification process for subsequent logins.
-
Integration with Postgres Row Level Security (RLS) allows for enforcement of MFA at the database level using claims in JWTs.
-
Future updates will consider support for WebAuthn, FIDO2 devices, and email notifications for MFA-related activities.