TLDR IT · MISCELLANEOUS

SUPABASE AUTH WITH AN UNSUPPORTED SMS PROVIDER

asyncdot.com19 min read

Summary from the TLDR IT newsletter

Supabase Auth can support unsupported SMS providers through the Send SMS hook, while GoTrue handles code generation, hashing, expiry, and session issuance. This approach keeps authentication logic within GoTrue and delegates only SMS delivery to a custom endpoint, avoiding the security risks of building a separate auth subsystem.