Supabase-Clerk Integration JWT Expiry

auth

NextJS Application hosted on Vercel
Clerk for Auth, Supabase for database/object storage
Clerk-Supabase Integration has been set up, as per: https://supabase.com/docs/guides/auth/third-party/clerk
https://clerk.com/docs/guides/development/integrations/databases/supabase

When a call is made to the backend, the following high-level steps are performed:
1. Authenticate the user using clerk auth()
2. Read from the database.
3. Backend performs its operation.
4. Write results to the database.
5. Return.

For step 3, short-running tasks (<30s) work perfectly. Longer tasks (currently ranging up to 5-6 minutes), throw an error at step 4.

Upload a file to object storage: “Error: Storage upload failed: "exp" claim timestamp check failed”
Write to a table in the database: “Error: Failed to add message: JWT expired”

Our Supabase client instantiation code:

export function getSupabaseClient() {
  return createClient<Database>(
    NEXT_PUBLIC_SUPABASE_URL,
    NEXT_PUBLIC_SUPABASE_ANON_KEY,
    {
      async accessToken() {
        return (await auth()).getToken();
      },
      auth: {
        persistSession: false,
        autoRefreshToken: false,
      },
    }
  );
}

export function getSupabaseClient() {
  return createClient<Database>(
    NEXT_PUBLIC_SUPABASE_URL,
    NEXT_PUBLIC_SUPABASE_ANON_KEY,
    {
      async accessToken() {
        return (await auth()).getToken();
      },
      auth: {
        persistSession: false,
        autoRefreshToken: false,
      },
    }
  );
}

Through our testing, we have verified that Supabase is using an expired token during its final write. We tried instantiating a new Supabase client for the final write and it ends up using the same token. Is there a way to refresh this token from the server? Is there a way to increase this token’s timeout? Is there another way around this problem?

Referenced Documentation:
• https://clerk.com/docs/guides/sessions/session-tokens
• https://supabase.com/docs/reference/javascript/initializing

We would appreciate any information or guidance with regards to this issue. Please let me know if there is any more information I can provide. Thank you!

Clerk | Supabase Docs

Use Clerk with your Supabase project

Clerk

Integrate Supabase with Clerk - Databases | Clerk Docs

Learn how to integrate Clerk into your Supabase application.

Clerk

Session tokens - Session management | Clerk Docs

Learn about session tokens and how to validate them in your backend.

JavaScript: Initializing | Supabase Docs

Supabase API reference for JavaScript: Initializing

Supabase-Clerk Integration JWT Expiry

auth

export function getSupabaseClient() {
  return createClient<Database>(
    NEXT_PUBLIC_SUPABASE_URL,
    NEXT_PUBLIC_SUPABASE_ANON_KEY,
    {
      async accessToken() {
        return (await auth()).getToken();
      },
      auth: {
        persistSession: false,
        autoRefreshToken: false,
      },
    }
  );
}

export function getSupabaseClient() {
  return createClient<Database>(
    NEXT_PUBLIC_SUPABASE_URL,
    NEXT_PUBLIC_SUPABASE_ANON_KEY,
    {
      async accessToken() {
        return (await auth()).getToken();
      },
      auth: {
        persistSession: false,
        autoRefreshToken: false,
      },
    }
  );
}

Clerk | Supabase Docs

Use Clerk with your Supabase project

Clerk

Integrate Supabase with Clerk - Databases | Clerk Docs

Learn how to integrate Clerk into your Supabase application.

Clerk

Session tokens - Session management | Clerk Docs

Learn about session tokens and how to validate them in your backend.

JavaScript: Initializing | Supabase Docs

Supabase API reference for JavaScript: Initializing

Supabase-Clerk Integration JWT Expiry

Supabase-Clerk Integration JWT Expiry

Similar Threads

Similar Threads

Similar Threads