How to Get the Current User in Supabase

1import { createClient } from '@supabase/supabase-js'
2
3const supabase = createClient(
4  process.env.NEXT_PUBLIC_SUPABASE_URL!,
5  process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!
6)
7
8// RECOMMENDED: Verified user data (makes API call)
9const { data: { user }, error } = await supabase.auth.getUser()
10if (user) {
11  console.log('Verified user:', user.id, user.email)
12}
13
14// FAST but UNVERIFIED: Reads from local storage/cookies
15const { data: { session } } = await supabase.auth.getSession()
16if (session?.user) {
17  console.log('Cached user:', session.user.id, session.user.email)
18}

1// React component example
2import { useEffect, useState } from 'react'
3import { createClient } from '@supabase/supabase-js'
4import type { User } from '@supabase/supabase-js'
5
6const supabase = createClient(
7  process.env.NEXT_PUBLIC_SUPABASE_URL!,
8  process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!
9)
10
11function useCurrentUser() {
12  const [user, setUser] = useState<User | null>(null)
13  const [loading, setLoading] = useState(true)
14
15  useEffect(() => {
16    async function fetchUser() {
17      const { data: { user } } = await supabase.auth.getUser()
18      setUser(user)
19      setLoading(false)
20    }
21    fetchUser()
22
23    // Listen for auth changes
24    const { data: { subscription } } = supabase.auth.onAuthStateChange(
25      (_event, session) => {
26        setUser(session?.user ?? null)
27      }
28    )
29
30    return () => subscription.unsubscribe()
31  }, [])
32
33  return { user, loading }
34}

1const { data: { user } } = await supabase.auth.getUser()
2
3if (user) {
4  // Core fields
5  console.log('ID:', user.id)                    // UUID
6  console.log('Email:', user.email)                // string
7  console.log('Phone:', user.phone)                // string | undefined
8  console.log('Created:', user.created_at)         // ISO timestamp
9
10  // User metadata (from signup options.data or OAuth)
11  console.log('Name:', user.user_metadata.full_name)
12  console.log('Avatar:', user.user_metadata.avatar_url)
13
14  // App metadata (server-set, includes provider info)
15  console.log('Provider:', user.app_metadata.provider)
16  console.log('Providers:', user.app_metadata.providers)
17
18  // Fetch additional profile data from your profiles table
19  const { data: profile } = await supabase
20    .from('profiles')
21    .select('*')
22    .eq('id', user.id)
23    .single()
24
25  console.log('Profile:', profile)
26}

1// supabase/functions/get-profile/index.ts
2import { createClient } from 'npm:@supabase/supabase-js@2'
3import { corsHeaders } from '../_shared/cors.ts'
4
5Deno.serve(async (req) => {
6  if (req.method === 'OPTIONS') {
7    return new Response('ok', { headers: corsHeaders })
8  }
9
10  const supabase = createClient(
11    Deno.env.get('SUPABASE_URL')!,
12    Deno.env.get('SUPABASE_ANON_KEY')!,
13    {
14      global: {
15        headers: { Authorization: req.headers.get('Authorization')! },
16      },
17    }
18  )
19
20  const { data: { user }, error } = await supabase.auth.getUser()
21  if (error || !user) {
22    return new Response(
23      JSON.stringify({ error: 'Unauthorized' }),
24      { status: 401, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
25    )
26  }
27
28  // User is verified — fetch their profile
29  const { data: profile } = await supabase
30    .from('profiles')
31    .select('*')
32    .eq('id', user.id)
33    .single()
34
35  return new Response(
36    JSON.stringify({ user: { id: user.id, email: user.email }, profile }),
37    { headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
38  )
39})

1-- RLS policy using auth.uid()
2create policy "Users read own data" on public.todos
3  for select to authenticated
4  using ((select auth.uid()) = user_id);
5
6-- Database function using auth.uid()
7create or replace function public.get_my_todos()
8returns setof public.todos
9language sql
10security invoker
11as $$
12  select * from public.todos
13  where user_id = (select auth.uid())
14  order by created_at desc;
15$$;
16
17-- Access full JWT claims
18select auth.jwt() ->> 'email' as email;
19select auth.jwt() -> 'app_metadata' ->> 'provider' as provider;