Supabase•9mo ago

Supabase Auth - with slack alerts?

How can I setup a Slackbot so anytime a user signs up it's posted in Slack? Also, this is my first time using Auth. I notice so many spam accounts sign up via email. Does others see this? How can you avoid this?

62 Replies

j4•9mo ago

It's recommended to implement captcha for password-based login.

legenden•9mo ago

I would assume something like a Custom Access Token hook can solve your need of posting to slack. https://supabase.com/docs/guides/auth/auth-hooks/custom-access-token-hook?queryGroups=language&language=http It just points to an http endpoint, either in your app/server or you can make a supabase edge function that when triggered will post to the relevant slack channel.

Custom Access Token Hook | Supabase Docs

Customize the access token issued by Supabase Auth

tomaspozo•9mo ago

What I do for slack notifications for signups is to use a db function that is triggered by inserts in auth.users (when a user signs up a record is created). This function calls an external webhook and passes the email and id to it. That webhook will take care of the Slack notification (I use no-code make.com) this is my function code in case it is useful:

CREATE OR REPLACE FUNCTION public.notify_new_signup()
 RETURNS trigger
 LANGUAGE plpgsql
 SECURITY DEFINER
AS $function$
BEGIN
  PERFORM 
    net.http_post(
      'https://api.your.com/slack',
      jsonb_build_object(
        'id', NEW.id,
        'email', NEW.email,
        'app', 'myapp.com'
      )
    );
  RETURN NEW;
END;
$function$;

CREATE OR REPLACE FUNCTION public.notify_new_signup()
 RETURNS trigger
 LANGUAGE plpgsql
 SECURITY DEFINER
AS $function$
BEGIN
  PERFORM 
    net.http_post(
      'https://api.your.com/slack',
      jsonb_build_object(
        'id', NEW.id,
        'email', NEW.email,
        'app', 'myapp.com'
      )
    );
  RETURN NEW;
END;
$function$;

you later set up the trigger on auth.users to call this function

mauerbacOP•8mo ago

Thanks @j4 , adding captcha was pretty easy @Tomás P. - i'm confused you cant trigger on auth.users though ? I tried setting up an auth hook which calls an HTTP endpoint which is an edge function

import { serve } from 'https://deno.land/std@0.165.0/http/server.ts'
import { Webhook } from 'https://esm.sh/standardwebhooks@1.0.0'

serve(async (req: Request) => {
  try {
    const payload = await req.text() // Get the raw request body as text
    const hookSecret = Deno.env.get('HOOK_SECRETS') // Secret set in your environment
    const headers = Object.fromEntries(req.headers) // Extract headers

    // Verify the webhook signature
    const wh = new Webhook(hookSecret) // Initialize the Webhook verifier
    const data = wh.verify(payload, headers) // Verify the payload and parse it

    const user = data.user // The user object is in the `data` field
    const slackWebhook = Deno.env.get('SLACK_WEBHOOK_URL') // Slack webhook URL from environment

    // Send Slack alert if user data is available
    if (user && slackWebhook) {
      const message = {
        text: `🎉 New user signup!\n- Email: ${user.email}\n- Signed up at: ${user.created_at}`,
      }

      const slackResponse = await fetch(slackWebhook, {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify(message),
      })

      if (!slackResponse.ok) {
        console.error(
          'Failed to send Slack message:',
          await slackResponse.text()
        )
      }
    }

    // Return any custom claims (optional)
    return new Response(
      JSON.stringify({
        customClaims: {
          example_claim: 'new_user', // Example custom claim
        },
      }),
      { headers: { 'Content-Type': 'application/json' } }
    )
  } catch (error) {
    console.error('Error verifying or processing the webhook:', error)
    return new Response('Unauthorized', { status: 401 })
  }
})

import { serve } from 'https://deno.land/std@0.165.0/http/server.ts'
import { Webhook } from 'https://esm.sh/standardwebhooks@1.0.0'

serve(async (req: Request) => {
  try {
    const payload = await req.text() // Get the raw request body as text
    const hookSecret = Deno.env.get('HOOK_SECRETS') // Secret set in your environment
    const headers = Object.fromEntries(req.headers) // Extract headers

    // Verify the webhook signature
    const wh = new Webhook(hookSecret) // Initialize the Webhook verifier
    const data = wh.verify(payload, headers) // Verify the payload and parse it

    const user = data.user // The user object is in the `data` field
    const slackWebhook = Deno.env.get('SLACK_WEBHOOK_URL') // Slack webhook URL from environment

    // Send Slack alert if user data is available
    if (user && slackWebhook) {
      const message = {
        text: `🎉 New user signup!\n- Email: ${user.email}\n- Signed up at: ${user.created_at}`,
      }

      const slackResponse = await fetch(slackWebhook, {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify(message),
      })

      if (!slackResponse.ok) {
        console.error(
          'Failed to send Slack message:',
          await slackResponse.text()
        )
      }
    }

    // Return any custom claims (optional)
    return new Response(
      JSON.stringify({
        customClaims: {
          example_claim: 'new_user', // Example custom claim
        },
      }),
      { headers: { 'Content-Type': 'application/json' } }
    )
  } catch (error) {
    console.error('Error verifying or processing the webhook:', error)
    return new Response('Unauthorized', { status: 401 })
  }
})

mauerbacOP•8mo ago

this didn't work. and when i tried to login it broke my app

mauerbacOP•8mo ago

but the edge function logs for this show nothing

mauerbacOP•8mo ago

I also tried to use your postgres function and got errors anytime i tried to save it

mauerbacOP•8mo ago

It said net wasn't enabled in my logs or an error around that

silentworks•8mo ago

Go to your database extensions and enable pg_net.

mauerbacOP•8mo ago

thanks @silentworks will try this now. Should I try the database function method or the edge functions route?

CREATE OR REPLACE FUNCTION public.notify_new_signup()
RETURNS TRIGGER
LANGUAGE plpgsql
AS $$
DECLARE
  payload JSONB;
BEGIN
  -- Construct the payload
  payload := jsonb_build_object(
    'id', NEW.id,
    'email', NEW.email,
    'created_at', NEW.created_at,
    'app', 'myapp.com' -- Include app information if needed
  );

  -- Notify the Edge Function
  PERFORM pg_notify('edge_function_event', payload::TEXT);

  RETURN NEW;
END;
$$;

CREATE OR REPLACE FUNCTION public.notify_new_signup()
RETURNS TRIGGER
LANGUAGE plpgsql
AS $$
DECLARE
  payload JSONB;
BEGIN
  -- Construct the payload
  payload := jsonb_build_object(
    'id', NEW.id,
    'email', NEW.email,
    'created_at', NEW.created_at,
    'app', 'myapp.com' -- Include app information if needed
  );

  -- Notify the Edge Function
  PERFORM pg_notify('edge_function_event', payload::TEXT);

  RETURN NEW;
END;
$$;

Will something like this work with pg_net enabled?

silentworks•8mo ago

As a developer you should explore your options and see what works for you. It's a part of the journey.

mauerbacOP•8mo ago

Yeah, that's fair. I spent like 1.5hrs last night exploring every option so was curious for a bit of a suggestion lol When I tried the edge function route I never saw the function was invoked or any logs in the supabase edge function tab. But ill try this again when that setting enabled

silentworks•8mo ago

1.5hrs is a small amount of time to explore. Implement all the ways you've learned about and see which works best for you. Your own personal experience trumps any suggestion you will be given.

mauerbacOP•8mo ago

Let me ask one question then. If i call PERFORM pg_notify('edge_function_event', payload::TEXT); and call my edge function how would you debug that function not being invoked?

silentworks•8mo ago

I've never used PERFORM nor pg_notify before, so I cannot advice you on that.

Gaming

Programming

Supabase Auth - with slack alerts?

Did you find this page helpful?