Oier Bravo Urtasun
7d91705fc2
- SQL migrations: users, collectives, collective_members, collective_invitations,
full RLS policies, is_active_member/is_member/is_admin helpers,
accept_invitation SECURITY DEFINER function, admin auto-promote trigger,
avatars storage bucket
- Auth refactor: replace keycloak-js with Supabase OAuth (GoTrue OIDC proxy,
Option B). signInWithOAuth({ provider: 'keycloak' }) + PKCE flow
- GoTrue config: GOTRUE_EXTERNAL_KEYCLOAK_URL + GOTRUE_EXTERNAL_KEYCLOAK_REDIRECT_URI
added to docker-compose.dev.yml; Keycloak realm updated with GoTrue callback URI
- New routes: /auth/callback, /invitation/[token], /(app)/collective/manage
- Functional onboarding: create collective or join via invite link
- Full settings page: display name (debounced), avatar (initials/emoji/upload),
language switcher, Keycloak account console link
- Components: Avatar.svelte (initials/emoji/upload with fallback),
ImageCropper.svelte (cropperjs, 1:1 crop, lazy-loaded)
- i18n: added all Fase 1 message keys (en + es); renamed 'delete' → 'action_delete'
(JS reserved word); fixed plugin-m-function-matcher major-version URL format
- Database types: manually seeded packages/types/src/database.ts from migrations
- .env.development: committed public dev defaults for SvelteKit type checking
- CLAUDE.md: documented /etc/hosts requirement for keycloak hostname
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
87 lines
1.8 KiB
TOML
87 lines
1.8 KiB
TOML
# Supabase local development configuration.
|
|
# See: https://supabase.com/docs/guides/cli/config
|
|
|
|
[api]
|
|
enabled = true
|
|
port = 54321
|
|
schemas = ["public", "storage", "graphql_public"]
|
|
extra_search_path = ["public", "extensions"]
|
|
max_rows = 1000
|
|
|
|
[api.tls]
|
|
enabled = false
|
|
|
|
[db]
|
|
port = 54322
|
|
shadow_port = 54320
|
|
major_version = 15
|
|
|
|
[db.pooler]
|
|
enabled = false
|
|
port = 54329
|
|
pool_mode = "transaction"
|
|
default_pool_size = 20
|
|
max_client_conn = 100
|
|
|
|
[realtime]
|
|
enabled = true
|
|
ip_version = "IPv4"
|
|
max_header_length = 4096
|
|
|
|
[studio]
|
|
enabled = true
|
|
port = 54323
|
|
api_url = "http://127.0.0.1"
|
|
openai_api_key = ""
|
|
|
|
[inbucket]
|
|
enabled = true
|
|
port = 54324
|
|
|
|
[storage]
|
|
enabled = true
|
|
file_size_limit = "50MiB"
|
|
|
|
[storage.image_transformation]
|
|
enabled = true
|
|
|
|
[auth]
|
|
enabled = true
|
|
site_url = "http://127.0.0.1:5173"
|
|
additional_redirect_urls = ["http://localhost:5173"]
|
|
jwt_expiry = 3600
|
|
enable_refresh_token_rotation = true
|
|
refresh_token_reuse_interval = 10
|
|
enable_signup = false
|
|
enable_anonymous_sign_ins = false
|
|
enable_manual_linking = false
|
|
|
|
[auth.email]
|
|
enable_signup = false
|
|
double_confirm_changes = true
|
|
enable_confirmations = false
|
|
|
|
[auth.sms]
|
|
enable_signup = false
|
|
enable_confirmations = false
|
|
|
|
# Keycloak as external OIDC provider via GoTrue (Option B).
|
|
# GoTrue acts as OIDC proxy: app → GoTrue → Keycloak → GoTrue issues Supabase JWT.
|
|
# Configured via environment variables in docker-compose.dev.yml:
|
|
# GOTRUE_EXTERNAL_KEYCLOAK_ENABLED, GOTRUE_EXTERNAL_KEYCLOAK_URL, etc.
|
|
# The [auth.third_party.keycloak] section is for Supabase CLI managed stacks;
|
|
# we use docker-compose directly so this section is intentionally left empty.
|
|
[auth.third_party.keycloak]
|
|
enabled = false
|
|
|
|
[edge_runtime]
|
|
enabled = true
|
|
policy = "oneshot"
|
|
inspector_port = 8083
|
|
|
|
[analytics]
|
|
enabled = false
|
|
port = 54327
|
|
vector_port = 54328
|
|
backend = "postgres"
|