用 SolidJS 构建一个用户管理应用
本教程演示了如何构建一个基本的用户管理应用。该应用可以进行用户认证和识别,将用户的个人资料信息存储在数据库中,并允许用户登录、更新他们的个人资料信息以及上传头像。该应用使用了:
🌐 This tutorial demonstrates how to build a basic user management app. The app authenticates and identifies the user, stores their profile information in the database, and allows the user to log in, update their profile details, and upload a profile photo. The app uses:
- Supabase 数据库 - 一个用于存储用户数据的 Postgres 数据库,并且有 行级安全,所以数据是受保护的,用户只能访问自己的信息。
- Supabase Auth - 允许用户注册和登录。
- Supabase 存储 - 允许用户上传个人头像。

如果你在跟着这个指南操作时遇到困难,你可以在GitHub上找到完整示例。
🌐 If you get stuck while working through this guide, you can find the full example on GitHub.
项目设置 #
🌐 Project setup
在你开始构建之前,你需要先设置数据库和 API。你可以通过在 Supabase 中启动一个新项目,然后在数据库中创建一个“架构”来完成这一步。
🌐 Before you start building you need to set up the Database and API. You can do this by starting a new Project in Supabase and then creating a "schema" inside the database.
创建一个项目 #
🌐 Create a project
- 在 Supabase 仪表板中创建一个新项目。
- 输入你的项目详情。
- 等新数据库上线。
设置数据库模式 #
🌐 Set up the database schema
现在设置数据库模式。你可以在 SQL 编辑器中使用“用户管理入门”快速开始,也可以复制粘贴下面的 SQL 并运行。
🌐 Now set up the database schema. You can use the "User Management Starter" quickstart in the SQL Editor, or you can copy/paste the SQL from below and run it.
- 在仪表板中转到SQL 编辑器页面。
- 点击 社区 > 快速入门 标签下的 用户管理入门。
- 点击运行。
你可以通过运行 db pull 命令将数据库架构拉到本地项目。查看本地开发文档获取详细说明。
🌐 You can pull the database schema down to your local project by running the db pull command. Read the local development docs for detailed instructions.
1supabase link --project-ref <project-id>2# You can get <project-id> from your project's dashboard URL: https://supabase.com/dashboard/project/<project-id>3supabase db pull获取 API 详情 #
🌐 Get API details
要与数据库表中的数据进行交互,你可以使用封装了自动生成的数据 API 端点的客户端库,并使用来自项目 Connect 对话框的项目 URL 和密钥进行认证。
🌐 To interact with data in database tables, you use the client libraries that wrap the auto-generated Data API endpoints, authenticating using the Project URL and key from the project Connect dialog.
阅读 API 密钥文档 以全面了解所有密钥类型、用途以及在哪里可以找到它们。
正在构建应用 #
🌐 Building the app
从零开始构建 SolidJS 应用。
🌐 Start building the SolidJS app from scratch.
初始化一个 SolidJS 应用 #
🌐 Initialize a SolidJS app
你可以使用 degit 来初始化一个叫做 supabase-solid 的应用:
🌐 You can use degit to initialize an app called supabase-solid:
1npx degit solidjs/templates/ts supabase-solid2cd supabase-solid然后安装唯一的额外依赖:supabase-js
🌐 Then install the only additional dependency: supabase-js
1npm install @supabase/supabase-js最后,把环境变量保存在一个 .env 文件中,里面包含你之前复制的 API URL 和密钥 earlier。
🌐 And finally save the environment variables in a .env with the API URL and the key that you copied earlier.
1VITE_SUPABASE_URL=https://your-project-ref.supabase.co2VITE_SUPABASE_PUBLISHABLE_KEY=your-publishable-key既然你已经有了 API 凭证,就创建一个辅助文件来初始化 Supabase 客户端。这些变量会暴露在浏览器上,这完全没问题,因为你在数据库上启用了行级安全。
🌐 Now that you have the API credentials in place, create a helper file to initialize the Supabase client. These variables will be exposed on the browser, and that's completely fine since you have Row Level Security enabled on the Database.
1import { createClient } from '@supabase/supabase-js'2import { Database } from './schema'34const supabaseUrl = import.meta.env.VITE_SUPABASE_URL5const supabasePublishableKey = import.meta.env.VITE_SUPABASE_PUBLISHABLE_KEY67export const supabase = createClient(supabaseUrl, supabasePublishableKey)应用风格(可选) #
🌐 App styling (optional)
一个可选步骤是更新 CSS 文件 src/index.css,让应用看起来更好。你可以在示例仓库中找到这个文件的完整内容。
🌐 An optional step is to update the CSS file src/index.css to make the app look better.
You can find the full contents of this file in the example repository.
设置一个登录组件 #
🌐 Set up a login component
设置一个 SolidJS 组件来管理使用 Magic Links 的登录和注册,让用户可以用邮箱登录而无需密码。
🌐 Set up a SolidJS component to manage logins and sign ups using Magic Links, so users can sign in with their email without using passwords.
1import { Component, createSignal } from 'solid-js'2import { supabase } from './supabaseClient'34const Auth: Component = () => {5 const [loading, setLoading] = createSignal(false)6 const [email, setEmail] = createSignal('')78 const handleLogin = async (e: SubmitEvent) => {9 e.preventDefault()1011 try {12 setLoading(true)13 const { error } = await supabase.auth.signInWithOtp({ email: email() })14 if (error) throw error15 alert('Check your email for the login link!')16 } catch (error) {17 if (error instanceof Error) {18 alert(error.message)19 }20 } finally {21 setLoading(false)22 }23 }2425 return (26 <div class="row flex-center flex">27 <div class="col-6 form-widget" aria-live="polite">28 <h1 class="header">Supabase + SolidJS</h1>29 <p class="description">Sign in via magic link with your email below</p>30 <form class="form-widget" onSubmit={handleLogin}>31 <div>32 <label for="email">Email</label>33 <input34 id="email"35 class="inputField"36 type="email"37 placeholder="Your email"38 value={email()}39 onChange={(e) => setEmail(e.currentTarget.value)}40 />41 </div>42 <div>43 <button type="submit" class="button block" aria-live="polite">44 {loading() ? <span>Loading</span> : <span>Send magic link</span>}45 </button>46 </div>47 </form>48 </div>49 </div>50 )51}5253export default Auth账户页面 #
🌐 Account page
用户登录后,允许他们编辑个人资料详情并管理账户。
🌐 After a user is signed in allow them to edit their profile details and manage their account.
为此创建一个名为 Account.tsx 的新组件。
🌐 Create a new component for that called Account.tsx.
1import { Component, createEffect, createSignal } from 'solid-js'23// ...45import { supabase } from './supabaseClient'67interface Props {8 userId: string9 userEmail: string | null10}1112const Account: Component<Props> = ({ userId, userEmail }) => {13 const [loading, setLoading] = createSignal(true)14 const [username, setUsername] = createSignal<string | null>(null)15 const [website, setWebsite] = createSignal<string | null>(null)16 const [avatarUrl, setAvatarUrl] = createSignal<string | null>(null)1718 createEffect(() => {19 getProfile()20 })2122 const getProfile = async () => {23 try {24 setLoading(true)2526 let { data, error, status } = await supabase27 .from('profiles')28 .select(`username, website, avatar_url`)29 .eq('id', userId)30 .single()3132 if (error && status !== 406) {33 throw error34 }3536 if (data) {37 setUsername(data.username)38 setWebsite(data.website)39 setAvatarUrl(data.avatar_url)40 }41 } catch (error) {42 if (error instanceof Error) {43 alert(error.message)44 }45 } finally {46 setLoading(false)47 }48 }4950 const updateProfile = async (e: Event) => {51 e.preventDefault()5253 try {54 setLoading(true)5556 const updates = {57 id: userId,58 username: username(),59 website: website(),60 avatar_url: avatarUrl(),61 updated_at: new Date().toISOString(),62 }6364 let { error } = await supabase.from('profiles').upsert(updates)6566 if (error) {67 throw error68 }69 } catch (error) {70 if (error instanceof Error) {71 alert(error.message)72 }73 } finally {74 setLoading(false)75 }76 }7778 return (79 <div aria-live="polite">80 <form onSubmit={updateProfile} class="form-widget">8182 {/* ... */}8384 <div>Email: {userEmail}</div>85 <div>86 <label for="username">Name</label>87 <input88 id="username"89 type="text"90 value={username() || ''}91 onChange={(e) => setUsername(e.currentTarget.value)}92 />93 </div>94 <div>95 <label for="website">Website</label>96 <input97 id="website"98 type="text"99 value={website() || ''}100 onChange={(e) => setWebsite(e.currentTarget.value)}101 />102 </div>103 <div>104 <button type="submit" class="button primary block" disabled={loading()}>105 {loading() ? 'Saving ...' : 'Update profile'}106 </button>107 </div>108 <button type="button" class="button block" onClick={() => supabase.auth.signOut()}>109 Sign Out110 </button>111 </form>112 </div>113 )114}115116export default Account头像照片 #
🌐 Profile photos
接下来,添加一个让用户上传个人资料照片的方式。Supabase 会为每个项目配置 Storage,用于管理像照片和视频这样的大文件。
🌐 Next, add a way for users to upload a profile photo. Supabase configures every project with Storage for managing large files like photos and videos.
创建一个上传小工具 #
🌐 Create an upload widget
先从创建一个新组件开始:
🌐 Start by creating a new component:
1import { Component, createEffect, createSignal, JSX } from 'solid-js'2import { supabase } from './supabaseClient'34interface Props {5 size: number6 url: string | null7 onUpload: (event: Event, filePath: string) => void8}910const Avatar: Component<Props> = (props) => {11 const [avatarUrl, setAvatarUrl] = createSignal<string | null>(null)12 const [uploading, setUploading] = createSignal(false)1314 createEffect(() => {15 if (props.url) downloadImage(props.url)16 })1718 const downloadImage = async (path: string) => {19 try {20 const { data, error } = await supabase.storage.from('avatars').download(path)21 if (error) {22 throw error23 }24 const url = URL.createObjectURL(data)25 setAvatarUrl(url)26 } catch (error) {27 if (error instanceof Error) {28 console.log('Error downloading image: ', error.message)29 }30 }31 }3233 const uploadAvatar: JSX.EventHandler<HTMLInputElement, Event> = async (event) => {34 try {35 setUploading(true)3637 const target = event.currentTarget38 if (!target?.files || target.files.length === 0) {39 throw new Error('You must select an image to upload.')40 }4142 const file = target.files[0]43 const fileExt = file.name.split('.').pop()44 const fileName = `${Math.random()}.${fileExt}`45 const filePath = `${fileName}`4647 let { error: uploadError } = await supabase.storage.from('avatars').upload(filePath, file)4849 if (uploadError) {50 throw uploadError51 }5253 props.onUpload(event, filePath)54 } catch (error) {55 if (error instanceof Error) {56 alert(error.message)57 }58 } finally {59 setUploading(false)60 }61 }6263 return (64 <div style={{ width: `${props.size}px` }} aria-live="polite">65 {avatarUrl() ? (66 <img67 src={avatarUrl()!}68 alt={avatarUrl() ? 'Avatar' : 'No image'}69 class="avatar image"70 style={{ height: `${props.size}px`, width: `${props.size}px` }}71 />72 ) : (73 <div74 class="avatar no-image"75 style={{ height: `${props.size}px`, width: `${props.size}px` }}76 />77 )}78 <div style={{ width: `${props.size}px` }}>79 <label class="button primary block" for="single">80 {uploading() ? 'Uploading ...' : 'Upload avatar'}81 </label>82 <span style="display:none">83 <input84 type="file"85 id="single"86 accept="image/*"87 onChange={uploadAvatar}88 disabled={uploading()}89 />90 </span>91 </div>92 </div>93 )94}9596export default Avatar更新账户组件 #
🌐 Update the Account component
创建了 Avatar 组件后,更新 src/Account.tsx 来包含它:
🌐 With the Avatar component created, update src/Account.tsx to include it:
1import { Component, createEffect, createSignal } from 'solid-js'2import Avatar from './Avatar'3import { supabase } from './supabaseClient'45interface Props {6 userId: string7 userEmail: string | null8}910const Account: Component<Props> = ({ userId, userEmail }) => {11 const [loading, setLoading] = createSignal(true)12 const [username, setUsername] = createSignal<string | null>(null)13 const [website, setWebsite] = createSignal<string | null>(null)14 const [avatarUrl, setAvatarUrl] = createSignal<string | null>(null)1516 createEffect(() => {17 getProfile()18 })1920 const getProfile = async () => {21 try {22 setLoading(true)2324 let { data, error, status } = await supabase25 .from('profiles')26 .select(`username, website, avatar_url`)27 .eq('id', userId)28 .single()2930 if (error && status !== 406) {31 throw error32 }3334 if (data) {35 setUsername(data.username)36 setWebsite(data.website)37 setAvatarUrl(data.avatar_url)38 }39 } catch (error) {40 if (error instanceof Error) {41 alert(error.message)42 }43 } finally {44 setLoading(false)45 }46 }4748 const updateProfile = async (e: Event) => {49 e.preventDefault()5051 try {52 setLoading(true)5354 const updates = {55 id: userId,56 username: username(),57 website: website(),58 avatar_url: avatarUrl(),59 updated_at: new Date().toISOString(),60 }6162 let { error } = await supabase.from('profiles').upsert(updates)6364 if (error) {65 throw error66 }67 } catch (error) {68 if (error instanceof Error) {69 alert(error.message)70 }71 } finally {72 setLoading(false)73 }74 }7576 return (77 <div aria-live="polite">78 <form onSubmit={updateProfile} class="form-widget">79 <Avatar80 url={avatarUrl()}81 size={150}82 onUpload={(e: Event, url: string) => {83 setAvatarUrl(url)84 updateProfile(e)85 }}86 />87 <div>Email: {userEmail}</div>88 <div>89 <label for="username">Name</label>90 <input91 id="username"92 type="text"93 value={username() || ''}94 onChange={(e) => setUsername(e.currentTarget.value)}95 />96 </div>97 <div>98 <label for="website">Website</label>99 <input100 id="website"101 type="text"102 value={website() || ''}103 onChange={(e) => setWebsite(e.currentTarget.value)}104 />105 </div>106 <div>107 <button type="submit" class="button primary block" disabled={loading()}>108 {loading() ? 'Saving ...' : 'Update profile'}109 </button>110 </div>111 <button type="button" class="button block" onClick={() => supabase.auth.signOut()}>112 Sign Out113 </button>114 </form>115 </div>116 )117}118119export default Account触发! #
🌐 Launch!
在所有组件就位后,更新 App.tsx:
🌐 With all the components in place, update App.tsx:
1import { Component, createEffect, createSignal } from 'solid-js'2import { supabase } from './supabaseClient'3import Account from './Account'4import Auth from './Auth'56const App: Component = () => {7 const [userId, setUserId] = createSignal<string | null>(null)8 const [userEmail, setUserEmail] = createSignal<string | null>(null)910 const syncClaims = async () => {11 const { data } = await supabase.auth.getClaims()12 setUserId((data?.claims.sub as string) ?? null)13 setUserEmail((data?.claims.email as string) ?? null)14 }1516 createEffect(() => {17 syncClaims()1819 supabase.auth.onAuthStateChange(() => {20 syncClaims()21 })22 })2324 return (25 <div class="container" style={{ padding: '50px 0 100px 0' }}>26 {!userId() ? <Auth /> : <Account userId={userId()!} userEmail={userEmail()} />}27 </div>28 )29}3031export default App完成后,在终端窗口运行这个:
🌐 Once that's done, run this in a terminal window:
1npm start然后打开浏览器访问 localhost:3000,你应该能看到完成的应用。
🌐 And then open the browser to localhost:3000 and you should see the completed app.

在这个阶段,你已经有了一个完全可用的应用!
🌐 At this stage you have a fully functional application!
添加一个服务器路由(SolidStart) #
🌐 Add a server route (SolidStart)
上面的示例只是客户端。如果你把应用迁移到 SolidStart 以实现服务器端渲染和 API 路由,你可以使用 @supabase/server 添加受保护的服务器端接口。
🌐 The example above is client-only. If you migrate the app to SolidStart for server-side rendering and API routes, you can add protected server endpoints with @supabase/server.
createSupabaseContext 可以在本地验证传入请求的 JWT(使用你项目的非对称签名密钥,无需往返认证服务器)、通过 RLS 将 Supabase 客户端限定到已认证的用户,并暴露用户的声明,所有这些都可以通过在你的 SolidStart API 路由处理器里的一次调用完成。
1npm install @supabase/server1import type { APIEvent } from '@solidjs/start/server'2import { createSupabaseContext } from '@supabase/server'34export async function GET({ request }: APIEvent) {5 const { data: ctx, error } = await createSupabaseContext(request, {6 auth: 'user',7 })89 if (error) {10 return Response.json({ message: error.message, code: error.code }, { status: error.status })11 }1213 const { supabase, userClaims } = ctx14 const { data, error: queryError } = await supabase15 .from('profiles')16 .select('username, website, avatar_url')17 .eq('id', userClaims.id)18 .single()1920 if (queryError) {21 return Response.json({ message: queryError.message }, { status: 500 })22 }2324 return Response.json(data)25}要将一个路由设为公开,请将 auth: 'user' 替换为 auth: 'none'。若想通过 SolidStart 中间件进行全应用的认证,或使用完整的 @supabase/server API,请查看入门指南。
🌐 To make a route public, swap auth: 'user' for auth: 'none'. For app-wide authentication via SolidStart middleware, or for the full @supabase/server API, see the getting started guide.