Open Source Friday with Supabase

Key Concepts

• Backend-as-a-Service (BaaS): Superbase's core offering, providing backend functionalities like database, APIs, authentication, storage, and real-time capabilities.
• Postgres Database: The central component of Superbase, leveraging its features and capabilities.
• Auto-generated APIs: APIs automatically created by Superbase when tables are created in the Postgres database.
• Role Level Security (RLS): A Postgres feature used by Superbase to control data access at the database level, ensuring data security and preventing unauthorized access.
• JSONB: A binary JSON data type in Postgres, allowing for flexible storage of unstructured data.
• Edge Functions: Superbase feature for interacting with external APIs like large language models or payment solutions.
• Open Source Contribution: Contributing to open source projects like Superbase by fixing typos, improving documentation, or contributing code.
• Launch Week: A recurring event where Superbase announces new features and product updates.

Superbase Overview

• Superbase is a backend-as-a-service (BaaS) platform built on top of a Postgres database.
• Founded in early 2020, it adopted a remote-first culture.
• The founders initially aimed to build a real-time solution for Postgres but pivoted to database hosting.
• Superbase leverages existing open-source solutions like Postgrest (REST API for Postgres) and GoTrue (authentication).
• The company prioritizes open-source solutions and contributes to the open-source ecosystem.
• Superbase recently joined the top 100 GitHub repositories based on the number of stars.

Superbase Features and Functionality

• Database:
  • Centered around Postgres, a powerful and popular database.
  • Provides a table editor for managing database tables.
  • Automatically generates APIs for interacting with the database.
• Authentication:
  • Offers authentication services with integration into the database.
  • Uses GoTrue, an open-source authentication solution.
• Storage:
  • Provides file storage capabilities, allowing users to upload images, videos, and PDFs.
  • Storage is built on top of Amazon S3 but integrates with Postgres for access control.
• Realtime:
  • Offers real-time capabilities for building applications like chat apps.
  • Uses a real-time server written in Elixir.
• Edge Functions:
  • Allows interaction with external APIs, such as large language models or payment solutions.
• Role Level Security (RLS):
  • A powerful feature that controls data access at the database level.
  • Ensures that users can only access the data they are authorized to see.
  • Policies can be defined and managed through the Superbase dashboard or via SQL migrations.
  • RLS policies are SQL-based and can be integrated into database migrations.
• NoSQL Support:
  • Postgres supports JSONB data type, allowing for flexible storage of unstructured data.
  • JSONB columns can be indexed for efficient querying.
  • Superbase uses JSONB columns for storing metadata in the authentication system.

Demo Application

• Tyler showcased a to-do application built with Superbase and React.
• The application uses Superbase's auto-generated APIs for data management.
• Authentication is implemented using Superbase's authentication services.
• The demo highlighted the use of role-level security to control access to tasks based on user ID.
• The demo also showed how changes in the database are reflected in real-time in the application.

Role Level Security (RLS) Example

• The demo showed how RLS can be used to prevent users from accessing tasks that belong to other users.
• Tyler demonstrated how to fix a misconfiguration in the RLS policy by updating the SQL query.
• The updated policy ensures that users can only select tasks that have a user ID matching their own user ID.
• This change was made at the database level, ensuring that the data is secure even if there are mistakes in the client-side code.

Contributing to Superbase

• Superbase welcomes contributions from the community.
• The project has a "good first issue" label for newcomers.
• Contributions can include fixing typos, improving documentation, or contributing code.
• Superbase has various types of projects written in different languages, including TypeScript, Elixir, Go, Rust, Python, and Dart.
• The documentation is open source and welcomes improvements.

Superbase Roadmap and Updates

• Superbase has an event called "Launch Week" that happens three times a year.
• During Launch Week, Superbase announces new features and product updates.
• Community meetups are organized around the world during Launch Week.
• To stay up-to-date, monitor the GitHub repository and follow Superbase on social media.

Swag

• Superbase is always looking for new and creative swag ideas.
• Tyler asked the community for suggestions on Twitter.
• Mugs, hats, and mechanical keyboards were mentioned as popular swag items.
• Superbase is giving away custom Nike Air Force Ones at the Render ATL conference.

Advice for New Open Source Contributors

• Don't be scared to contribute.
• Start with a draft PR and ask for feedback.
• The Superbase community is welcoming and supportive.
• Even small contributions like fixing typos are valuable.

Conclusion

Superbase is a powerful and versatile backend-as-a-service platform built on top of Postgres. It offers a wide range of features, including auto-generated APIs, authentication, storage, real-time capabilities, and role-level security. Superbase welcomes contributions from the community and provides a supportive environment for new open-source contributors. The project is constantly evolving, with new features and updates being announced regularly during Launch Week.