# Supabase Next.js Starter

> The minimum correct setup for Supabase auth in the App Router

Category: Full stack starter kits (https://aiarabicdev.com/boilerplates)
Canonical page: https://aiarabicdev.com/boilerplates/supabase-nextjs-starter
Tags: nextjs, supabase, auth, postgres, starter

Supabase's official Next.js starter is small on purpose. It gets cookie based server side auth right across middleware, server components and route handlers, which is the part everyone implements incorrectly the first time, and stops there.

## Facts

- Licence: Apache-2.0
- Language: TypeScript
- Cost: Free core, paid tiers exist
- Self hostable: yes
- Added: 2026-08-23
- Last checked: 2026-08-23

## Links

- Website: https://supabase.com/docs/guides/getting-started/quickstarts/nextjs
- Source: https://github.com/supabase/supabase/tree/master/examples/auth/nextjs

## Why the small scope is the point

Server side auth in the App Router has a narrow correct answer. The session has to be refreshed in middleware, the cookie handling has to be consistent between the browser and server clients, and getting either wrong produces bugs that only appear on a slow connection.

This starter is the working version of that. Reading it once is worth more than several attempts at assembling it from documentation.

## What you add yourself

Everything else. No billing, no teams, no admin. It is a correct foundation rather than a product, which is the right shape when you want Supabase specifically and intend to make your own decisions above it.

Row level security is the piece to take seriously next. A Supabase project without considered policies is a public database, and no starter can decide those rules for you.

## Reach for it when

- you have already chosen Supabase and want the auth wiring correct
- you want a foundation rather than a finished product
- you intend to make your own decisions above the database

## Watch out for

- no billing, teams or admin, this is auth and nothing more
- row level security is your responsibility and is where the real risk lives
- the hosted service has a free tier that pauses inactive projects

## Get started

Scaffold:

```sh
pnpm create next-app -e with-supabase
```

---

aiarabicdev is a free directory of open source tools. No affiliate links, no sponsored placements.
New entries are announced at https://t.me/arabic_Intelligence