Add self-hosted Supabase support for local development

[devin-ai-integration]

📥 Pull Request

📘 Description

This PR adds support for self-hosted Supabase instances in local development environments. The changes enable AgentOps to connect to local Supabase Docker deployments without SSL certificates and handle JWT token differences between hosted and self-hosted Supabase.

Key Changes:

• JWT Validation: Made the iss (issuer) field optional in SupabaseUserData model since local Supabase doesn't include it in JWT tokens
• SSL Configuration: Added SUPABASE_SSLMODE environment variable support with PostgreSQL connection string updates
• Docker Environment: Added PostgreSQL connection variables to compose.yaml for direct database access
• Environment Variables: Added SUPABASE_SSLMODE configuration option (defaults to prefer)

🧪 Testing

• ✅ Verified complete authentication flow (signup → login → dashboard access) with local Supabase
• ✅ Tested JWT token validation with local Supabase tokens (missing iss field)
• ✅ Confirmed PostgreSQL connections work with sslmode=disable for local development
• ✅ Validated AgentOps API and Dashboard services start correctly with new environment variables
• ✅ Tested Supabase Studio admin interface accessibility

🔍 Review Focus Areas

Security Considerations:

• JWT Validation: Review making iss field optional - ensure this doesn't weaken authentication security
• SSL Configuration: Verify SUPABASE_SSLMODE=disable is only used for local development, not production
• Environment Variables: Check that database credentials in Docker Compose are properly secured

Compatibility:

• Ensure changes maintain compatibility with hosted Supabase instances
• Verify environment variable defaults don't break existing setups

---

Link to Devin run: https://app.devin.ai/sessions/35e0a46063c744bdb9e75bf5d781c749
Requested by: @areibman

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring