Supabase

Open-source Firebase alternative: Postgres + GoTrue auth + Realtime + Storage. Same shape as ionic-firebase but Postgres-flavored — pick this when your team prefers SQL, RLS, or self-hosting.

When to consult

• Project setup + client init: setup.md
• Auth (email, magic link, OAuth, native Apple/Google): auth.md
• Database (queries, RLS, realtime): database.md
• Per-framework integration: framework-snippets.md

Hard rules

• ✅ The anon key is publishable — safe to ship in the bundle. Row Level Security (RLS) does the gating.
• ✅ The service role key is a secret — NEVER ship it; server-side only.
• ✅ Enable RLS on every table that holds user data. Without RLS, anon-key clients can read/write everything.
• ✅ Native OAuth (Google / Apple) on mobile uses signInWithOAuth({ skipBrowserRedirect: true }) + your app's deep-link scheme. The default web flow doesn't return cleanly to a native app.
• ❌ Don't store JWTs in localStorage if you can avoid it — use @capacitor/preferences via the Supabase storage adapter (see setup.md).