From the source
Supabase announced support for asymmetric JWTs with Supabase Auth, allowing token verification without relying on the Auth server.
The company also introduced new publishable and secret API keys to replace the legacy anon and service_role keys.
Asymmetric JWT support is available as an opt-in feature, with all new projects defaulting to it from October 1, 2025.





