This is a full-stack Slack clone example using:
- Frontend:
- Next.js - a React framework for production.
- Supabase.js for user management and realtime data syncing.
- Backend:
- supabase.com/dashboard: hosted Postgres database with restful API for usage with Supabase.js.
- CodeSandbox: https://codesandbox.io/s/github/supabase/supabase/tree/master/examples/nextjs-slack-clone
The Vercel deployment will guide you through creating a Supabase account and project. After installation of the Supabase integration, all relevant environment variables will be set up so that the project is usable immediately after deployment 🚀
Sign up to Supabase - https://supabase.com/dashboard and create a new project. Wait for your database to start.
Once your database has started, run the "Slack Clone" quickstart.
Go to the Project Settings (the cog icon), open the API tab, and find your API URL and anon
key. You'll need these in the next step.
The anon
key is your client-side API key. It allows "anonymous access" to your database, until the user has logged in. Once they have logged in, the keys will switch to the user's own login token. This enables row level security for your data. Read more about this below.
NOTE: The service_role
key has full access to your data, bypassing any security policies. These keys have to be kept secret and are meant to be used in server environments and never on a client or browser.
- Create or select a project on Supabase Dashboard.
- Copy and fill the dotenv template
cp .env.production.example .env.production
- Link the local project and merge the local configuration with the remote one:
SUPABASE_ENV=production npx supabase@latest link --project-ref <your-project-ref>
- Sync the configuration:
SUPABASE_ENV=production npx supabase@latest config push
- Sync the database schema:
SUPABASE_ENV=production npx supabase@latest db push
Supabase integrates seamlessly with Vercel's preview branches, giving each branch a dedicated Supabase project. This setup allows testing database migrations or service configurations safely before applying them to production.
-
Ensure the Vercel project is linked to a Git repository.
-
Configure the "Preview" environment variables in Vercel:
NEXT_PUBLIC_SUPABASE_URL
NEXT_PUBLIC_SUPABASE_ANON_KEY
-
Create a new branch, make changes (e.g., update
max_frequency
), and push the branch to Git.- Open a pull request to trigger Vercel + Supabase integration.
- Upon successful deployment, the preview environment reflects the changes.
Use plus addressing to sign up users with the admin
& moderator
roles. Email addresses including +supaadmin@
will be assigned the admin
role, and email addresses including +supamod@
will be assigned the moderator
role. For example:
// admin user
email+supaadmin@example.com
// moderator user
email+supamod@example.com
Users with the moderator
role can delete all messages. Users with the admin
role can delete all messages and channels (note: it's not recommended to delete the public
channel).
This project uses very high-level Authorization using Postgres' Row Level Security.
When you start a Postgres database on Supabase, we populate it with an auth
schema, and some helper functions.
When a user logs in, they are issued a JWT with the role authenticated
and their UUID.
We can use these details to provide fine-grained control over what each user can and cannot do.
- For the full schema refer to full-schema.sql.
- For documentation on Role-based Access Control, refer to the docs.
Supabase is open source, we'd love for you to follow along and get involved at https://github.com/supabase/supabase