feat(rsc-auth): Implement getRoles function in auth mw & update default ServerAuthState

packages/auth-providers/supabase/middleware/README.md

@@ -1,11 +1,5 @@
 # Supabase Middleware
 
----
-
-NOTE: This README needs to be updated when the Supabase Web Auth will create a client and register the middleware
-
-----
-
 ```tsx filename='entry.server.tsx'
 import type { TagDescriptor } from '@redwoodjs/web'
 
@@ -20,12 +14,24 @@ interface Props {
   meta?: TagDescriptor[]
 }
 
+type SupabaseAppMetadata = {
+  provider: string
+  providers: string[]
+  roles: string[]
+}
+
 export const registerMiddleware = () => {
   const supabaseAuthMiddleware = initSupabaseMiddleware({
     // Optional. If not set, Supabase will use its own `currentUser` function
     // instead of your app's
     getCurrentUser,
+    // Optional. If you wish to enforce RBAC, define a function to return roles.
+    // Typically, one will define roles in Supabase in the user's app_metadata.
+    getRoles: ({ app_metadata }: { app_metadata: SupabaseAppMetadata }) => {
+      return app_metadata.roles
+    },
   })
+
   return [supabaseAuthMiddleware]
 }