Yes and no, really depends on POV. This is handled by role Authenticator who becomes either the registered user or anonymous. You can see the overview in details here https://postgrest.org/en/v7.0.0/auth.html