Custom OAuth providers #417
Replies: 35 comments 64 replies
-
|
Hey @LoriKarikari - do you mean another provider like "Twitter", "Facebook" etc? We're working on these now. Are there any providers in particular that you're looking for? |
Beta Was this translation helpful? Give feedback.
-
|
As soon as I get the access token and refresh token from the provider, how can I create a user? @kiwicopple const userInfo = await spotifyApi.getMe();
const user = {
aud: "authenticated",
exp: 1615824388,
sub: userInfo.body.id,
email: userInfo.body.email,
app_metadata: {
provider: "spotify",
access_token: data.body["access_token"],
refresh_token: data.body["refresh_token"],
},
user_metadata: {},
role: "authenticated",
};
// INSERT IN auth.users |
Beta Was this translation helpful? Give feedback.
-
|
@baptisteArno Seems like Spotify OAuth might be landing soon: supabase/auth#245 |
Beta Was this translation helpful? Give feedback.
-
|
Have you found a solution? |
Beta Was this translation helpful? Give feedback.
-
|
@kiwicopple is there any workaround you might recommend for now to byo an oAuth provider. Any API in GoTrue we can use or would it work to handle the custom provider callbacks with edge functions and write straight to the auth table? |
Beta Was this translation helpful? Give feedback.
-
|
@baptisteArno Have you found a solution to create user for customized auth provider? |
Beta Was this translation helpful? Give feedback.
-
|
I am curious about the same question. There are dozens of different oAuth providers, that may be local to certain countries or enterprise spheres: Sber, VKontakte (aka Facebook-competitor) and Yandex (aka Google-competitor) in Russia to begin with. I can't see even the immensely active community of Supabase to implement all of them into the default distributipn. So the question arises, is there a possibility we would be able to define our own providers in a friendly UI, or at least as a some sort of a config? Would appreciate, if you would consider either giving the administrator ability to add custom oAuth providers or at least adding a chapter to the documentation about implementing custom authentication service and integrating that with Supabase's authorization. Looking forward to your response! |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for sharing the guide, Grace! I was curious what might be the appropriate way to insert that data into |
Beta Was this translation helpful? Give feedback.
-
|
How can we handle token refresh with this? |
Beta Was this translation helpful? Give feedback.
-
|
Same question: How to generate the correct refresh tokens this way? |
Beta Was this translation helpful? Give feedback.
-
|
@gracew So in your solution, the auth tables would contain no user info(for example, the user_id would not be genreated), while only depends on the customized jwt playload to do RLS in posrgresql? |
Beta Was this translation helpful? Give feedback.
-
Would you mind updating your guide, now that |
Beta Was this translation helpful? Give feedback.
-
|
Consider make auth support for Wechat. |
Beta Was this translation helpful? Give feedback.
-
|
@gracew You are awesome! Looks like that is a great way to integrate with any authentication layer. I hope supabase would have official support for custom auth (maybe that can be done with functions) |
Beta Was this translation helpful? Give feedback.
-
|
have you found a solution |
Beta Was this translation helpful? Give feedback.
-
|
Please consider Keycloak! |
Beta Was this translation helpful? Give feedback.
-
|
Pretty sure Keycloak got support in the latest Launchweek! |
Beta Was this translation helpful? Give feedback.
-
|
Yup |
Beta Was this translation helpful? Give feedback.
-
|
Implement openID 2.0 for steam web authentication |
Beta Was this translation helpful? Give feedback.
-
|
I attempted a PR for Steam provider support |
Beta Was this translation helpful? Give feedback.
-
|
Can you please add Shopify ? |
Beta Was this translation helpful? Give feedback.
-
|
Instagram, TikTok, Pinterest support? I'd love if we could get some sort of documentation on how to add custom providers. |
Beta Was this translation helpful? Give feedback.
-
|
+1 for Tiktok |
Beta Was this translation helpful? Give feedback.
-
|
+1 for Tiktok |
Beta Was this translation helpful? Give feedback.
-
|
Anotherrrrr +1 for Tiktok pls! |
Beta Was this translation helpful? Give feedback.
-
|
+1 for these OAuth login options, thanks @kris for mentioning this. @kiwicopple these networks combined have a total 4.282 BILLION monthly active users, this would be massive for supabase to support these OAuth login options and will increase adoption of builders using supabase and more users using the apps on your platform. Please consider TikTok, Instagram and Pinterest login. |
Beta Was this translation helpful? Give feedback.
-
|
+1 for tiktok |
Beta Was this translation helpful? Give feedback.
-
|
Atlassian, please. Needed it for my Jira Integration App |
Beta Was this translation helpful? Give feedback.
-
|
Please add Vipps authentication. https://vipps.no This is a Norwegian payment service. |
Beta Was this translation helpful? Give feedback.
-
|
Looking to integrate LINE oauth. Used pretty much all of Taiwan/Japan. Will there be a way to add OAUTH2 providers not on the list? |
Beta Was this translation helpful? Give feedback.
-
|
I'll upvote. So few plugins supporting this very popular Asian network. |
Beta Was this translation helpful? Give feedback.
-
|
Agreed. LINE is also used in a lot of Southeast Asia too. If you counted by the numbers... it probably is just as popular as telegram. Probably more so. |
Beta Was this translation helpful? Give feedback.
-
|
Interested in using Authentik for a self-hosted solution. Not sure if this is possible yet |
Beta Was this translation helpful? Give feedback.
-
|
I think SAML 2.0 integration is possible with Authentik and Supabase |
Beta Was this translation helpful? Give feedback.
-
|
would love an integration with quick books online https://developer.intuit.com/app/developer/qbo/docs/develop/authentication-and-authorization/oauth-2.0 |
Beta Was this translation helpful? Give feedback.
-
|
Vk and Steam support would be awesome |
Beta Was this translation helpful? Give feedback.
-
|
+1 for Steam |
Beta Was this translation helpful? Give feedback.
-
|
VK and Yandex |
Beta Was this translation helpful? Give feedback.
-
|
I attempted a PR for Steam provider support |
Beta Was this translation helpful? Give feedback.
-
|
Could you please add Binance? https://developers.binance.com/docs/login/introduction |
Beta Was this translation helpful? Give feedback.
-
|
I would love to see a provider for Battle.net! |
Beta Was this translation helpful? Give feedback.
-
|
To all those still coming here, I wouldn't hope for much - I emailed support back in march of this year and they said it is "unlikely" that more individual providers will be added. Here's the full response: |
Beta Was this translation helpful? Give feedback.
-
|
+1 for Yandex and VK |
Beta Was this translation helpful? Give feedback.
-
|
One of the things that attracted us to Supabase was the promise to make authentication easy(er). While we would still benefit today by moving to Supabase, we cannot because Supabase does not include our "social providers." This includes Xbox, Playstation, and Nintendo. I kindly request new documentation to cover "bringing your own" authentication provider. Thanks for your hard work and excellent product, |
Beta Was this translation helpful? Give feedback.
-
|
I found this thread and also wanted to chime in, that we assumed this is possible with Supabase, only to find out it's not. We have our partners with their own OAuth2 identity solutions, branded and customized so we cannot bring their users into our platform easily because we can't integrate with them. This seems like an incredibly basic and required feature to have at this point. |
Beta Was this translation helpful? Give feedback.
-
|
Possible workaround for now, until Supabase implements support for generic OAuth2/OIDC provider: https://github.com/orgs/supabase/discussions/6547#discussioncomment-9049664 |
Beta Was this translation helpful? Give feedback.
-
|
Hey, yeah I saw this and I like the idea. The only issue is that you can have only one provider of each type right? This limits us on partners we can work with because we'll only be able to create one keycloak provider. |
Beta Was this translation helpful? Give feedback.
-
|
In this case maybe you can install Keycloak and use it as an identity broker instead of Supabase. |
Beta Was this translation helpful? Give feedback.
-
|
Yeah I'm considering this, we're actually just keen on dropping Supabase entirely in favor of something like Ory that doesn't make that an issue, as our use case might require us to add multiple custom oauth providers in the future to our login solution. |
Beta Was this translation helpful? Give feedback.
-
|
Looks like they will start working on this in September, so probably a good
6 months away. I’ve been looking at alternatives and Auth0 also supports
custom providers but would rather keep everything in supabase.
…On Fri, 31 May 2024 at 7:11 PM, Maciej Lewiński ***@***.***> wrote:
Yeah I'm considering this, we're actually just keen on dropping Supabase
entirely in favor of something like Ory that doesn't make that an issue, as
our use case might require us to add multiple custom oauth providers in the
future to our login solution.
—
Reply to this email directly, view it on GitHub
<#417 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AADK3DXVIMU4S455SOI5PKDZFA5EZAVCNFSM4VCHFC62U5DIOJSWCZC7NNSXTOKENFZWG5LTONUW63SDN5WW2ZLOOQ5TSNRRGYYDMOI>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Hey @blechatellier, any chance you could link the information regarding starting this feature in September? We're contemplating on moving away from Supabase, but if the waiting time is ~5-6 months, we might just not do that - depending on what's in store. @J0 - would love to hear your input - is this in the works? And will we be able to eg register different providers with the same provider type? the solution is currently quite limited, but Supabase offers us what we want in terms of experience - so we would rathe 98D r stay :) |
Beta Was this translation helpful? Give feedback.
-
|
@RobbyUitbeijerse second hand information from a convo I had on Twitter https://x.com/stojaaan/status/1795421822114005163?s=46&t=zIzrZmJzfRoF4kjsueapFA |
Beta Was this translation helpful? Give feedback.
-
|
Thanks @blechatellier! Let's see... |
Beta Was this translation helpful? Give feedback.
-
|
@hf Hello there! Is this still planned in to be started in Sept? |
Beta Was this translation helpful? Give feedback.
-
|
@hf Any update on this? |
Beta Was this translation helpful? Give feedback.
-
|
I think you guys need to build your own Identification Provider and integrate it with Supabase through SAML 2.0 integration |
Beta Was this translation helpful? Give feedback.
-
|
Hi all, If supabase wanted to add this feature as simple solution would be to add a migration script that adds a "Provider" table to the auth schema in the database, then update the auth/internal/api/external.go function which currently looks like this: ` }` and change the default case at the end to call a method that checks for the existence of a custom provider in the database and return that as a new provider object if it exists. |
Beta Was this translation helpful? Give feedback.
-
|
Unfortunately, this might force me to move off Supabase, which I truly don't want to do. Is there any clarity at all that can be provided? Is it still on the RoadMap? |
Beta Was this translation helpful? Give feedback.
-
|
Lol hello? |
Beta Was this translation helpful? Give feedback.
-
|
Does anyone know how to implement IG login using custom OAuth? Very confused on what should the callback URLs on Supabase and / IG should be |
Beta Was this translation helpful? Give feedback.
-
|
Shopify integration would be nice. Connecting stores information and data to Supabase in order to use it for further projects. |
Beta Was this translation helpful? Give feedback.
-
|
Any updates on this? It’s unbelievable that we still don’t have such a basic feature… |
Beta Was this translation helpful? Give feedback.
-
|
Completely agree. Decided I have to move away from Supabase. Assumed this was going to be an option, spent a ton of time investing in the platform and now poof. wasted |
Beta Was this translation helpful? Give feedback.
-
|
Same. Switched to auth.js because of this |
Beta Was this translation helpful? Give feedback.
-
|
@antonlvovych Hey was it easy to switch? I see there is https://authjs.dev/getting-started/adapters/supabase?framework=express Do you use row level security? |
Beta Was this translation helpful? Give feedback.
-
|
Also interested |
Beta Was this translation helpful? Give feedback.
-
|
Same, extremely need VK and Yandex authorizations that are presented in better-auth |
Beta Was this translation helpful? Give feedback.
-
|
And also Gosuslugi? =) |
Beta Was this translation helpful? Give feedback.
-
|
What about Firebase, now that it's possible to use Firebase as a 3rd party auth provider ? |
Beta Was this translation helpful? Give feedback.
-
|
I appreciate the incredible work everyone has been doing on this project it’s a ver solid and easy to use solution to a set of very complex problems, and it’s been a joy to use (mostly). Thanks again for all the hard work, and I'd love to hear any updates or timelines regarding this feature. |
Beta Was this translation helpful? Give feedback.
-
|
same for us! |
Beta Was this translation helpful? Give feedback.
-
|
Hey! What are you planning on switching to? Custom OIDC is a dealbreaker for us too |
Beta Was this translation helpful? Give feedback.
-
Hey! For us, keycloak has always been on our radar, it was actually one of our first considerations. However, its operational complexity (setup, scaling, maintenance) didn't align with our needs when we initially adopted supabase. Now, though, the lack of custom OIDC support forces us to reevaluate. Switching to another baas (firebase, etc.) felt counterproductive, we'd just end up in the same situation in a few month, dependent on someone else's roadmap for critical features. While self-hosting supabase could work technically (we've looked into modifying GoTrue for extra providers), it defeats the purpose of using a managed service in the first place. If we're going to invest in infrastructure overhead, we'd rather pick a battle-tested, extensible solution like keycloak, even if it means sacrificing some of supabase's cool features (storage, functions, etc.). Just to be clear: supabase has been doing very good for our auth workflows, and this isn't a reflection on the project or the team (y'all are doing incredible work). But since we're only using supabase for auth/oauth, the cost-benefit calculus shifts. keycloak, despite its steeper learning curve and a few other drawbacks, feels like the best option right now. Would still love any updates on oidc timelines, though, if priorities shift, we'd absolutely revisit supabase. |
Beta Was this translation helpful? Give feedback.
-
Hi,
Is it possible to add custom OAuth providers if you want to use one that isn't built-in yet?
Beta Was this translation helpful? Give feedback.
All reactions