Supabase is an open source Firebase alternative. Start your project with a Postgres database, Authentication, instant APIs, Edge Functions, Realtime subscriptions, and Storage.

Supabase

the `auth.signIn()` method returns a `{ user, error }`, but are these both expected to always be null if your using Magic Link or Phone OTP?

is there any way to get the user id  of the newly created user, even before they are verified? (I need to do some database inserts with data from the sign in form that needs to be tied to the user id)

If the user has not finished signing in then you don't have a valid token for the database.   I assume you would not do an insert into a table without verifying the user doing the insert with RLS.   If you used the signUp method (phone,email) you can pass in data with meta data.

from what I saw, phone doesn't have a signUp method, just signin and verifyOTP

but also, then how are we able to save any user details when using magic link or phone OTP passwordless? especially magiclink, can you pass a payload to magiclink?

https://supabase.com/docs/reference/javascript/auth-signup#sign-up-with-phone

yeah that mentions using the signIn method

which is what I am doing, and it will return a null user (tho the user is created but not verified, with a uuid, in supabase)

Even if you had the uuid what could you do with it safely?

really I just need to be able to save a user record linked to the user account using passwordless login (magic link and phone)

create a user record in a table with details, even if they aren't verified yet

otherwise i have no way to save anything a user enters on a sign up form

like anyone could create accounts and not verify them?

You can't have RLS yet on uuid, so your table has no policy to protect it?

policies come from the uuid in the jwt, which you won't have until the user is verified.

so whats the method in supabase for creating users? seems like its a pretty standard process for apps to need to store some user data when a user creates an account

would seem asinine to me for this to not be possible (sorry, new to supabase, trying it out from firebase)

(particularly with phone and magic link, since I want to keep the app passwordless)

digging thru the github issues and I'm surprised I haven't found anyone hitting this yet

I collect info from the user after they have successfully signed in as first step with valid signin.  I've been doing the same looking just now.  I've seen people ask before though.

Ahh, yeah I'm hoping to collect some information off the bat

I was hoping it would just return the user since its a created user, even if its not verified yet (verified should just be a flag on the auth.user record)

or that there would be a way to pass a payload to the magiclink or OTP

(OTP less so since I can keep that stored in the app and pass it)

But even if it did return a user UUID, you really have an issue with writing to the database without a validated token, otherwise anyone can't write to that table.

i dont think it being validated should have bearing

if you try to sign in with the same number/different browser session, it doesn't create a new record with a new UID, it still knows your phone number has an unvalidated user record with a UID

so that record linked to that UUID could still be locked to that user and if they never actual validate, then no one will ever be able to do anything with the record (apart from admins)

If it were passed in as metadata data in signIn, I agree.  But you can't just write a table as a anon user safely.

the user data is all getting passed to my backend server which is writing, but needs the UID to have something to look at for when users auth

Ah, then you could save by phone number or email as one option

ultimately though, the thing thats wild to me is that supabase cant create users with user data. that seems so basic as a necessity

there's a chance users will have an email and phone on an account (tho the login will just be one method still)

and how does it make a difference to save the phone number or the uid (im actually trying to save a users table with uid, email, phone number, and a few other user details, separate from the auth.users table since I can't do anything with that one)

It would be nice to have a UUID in your case (on the server side) I agree.  But signIn will not return it.  I don't use server stuff, any session or cookie options?

idk if there's a way with cookies, but with magic link I'm not sure if it would login with a new session and wouldn't have any passed data

maybe I'll file a feature request or something to the github (hurts to wait tho haha)

I did not look to see if there is one yet, and have never tracked the flow of code deep into gotrue on the server, but since signIn waits for an error response, one would think it could get the UUID back.

yeah, its odd you just get all `null`s back from signIn when doing it passwordless, so can't really do much (for when its successful)

Technically if you pass the users sign in info to the server you could query the auth table and get their uuid since you can use servicekey for access... sort of a kluge....

a bit hacky, but it might work haha, I'll give it a shot, at least in the mean time

and then will probably put an issue up tonight (and maybe there's a solution someone closer to the implementation of the code would know)

<@!329839691195219969>  This might be another option https://supabase.com/docs/reference/javascript/auth-api-createuser  
Create the user on the server side with no password and then do otp signin.

so haven't taken a stab at doing it all server-side yet. Tried the route of setting up a trigger to create the user field on the auth.user insert which works, but I still can't pull anything from my public.users tables I think because of RLS (which admittedly I think I'm only partially understanding). So if a user is not signed in with a session, then nothing else can access any of their data/records associated with that user (even the app/admin/backend)?

Hi, is there any problem with supabase right now? I cant edit settings in admin panel at all,

Hello is this the right place to talk about a problem I am having with the supabaseAPI?

Hi <:vmathi:812484657547313212> Try to reload your page and try again

Hi <:vmathi:812484657547313212> I think the best place for you would be in <#843999948717555735> :p

I had to open a different browser (Google chrome but with a different account), looks like I'm banned on that browser or something like that 😦

Alright in  that case send an email to the support ``support@supabase.io`` explaining your problem, it gonna be the best way to solve it!

Hi, anyone know why, when I've put my site on vercel, it's like all the tables have frozen, they're not updating, i've removed all the rows and its still just stuck in that position with that set rows

but in localhost i can perform crud operations just fine

Possibly your client keys are not getting set?

That’s the thing I didn’t use env variables

And it’s like it cached it and after we made like 3 insertions in the table it froze

Is the code running server side to supabase, or from a browser to supabase?

But it runs from localhost still and Supabase UI is fine?
So the code is running server side making the calls, so you can't see the actual network calls.

Seems like bad token key... Can you console.log your keys right before createClient?  Does not explain it working for a moment though

Is your app crashing on vercel somehow silently or looping?

Well thanks for leading me to realisation 😂

I hear I can have 2 DBs on the free tier. 

Is it against terms to use 2 accounts, so a total of 4 DBs on my app?

I don't need it, but the data is separate enough that the pros of storage gain would outweigh the cons

Is onAuthStateChange part of realtime pricing? Or is it included in auth?\

Not sure what you mean by pricing... but onAuthStateChange is part of auth to handle state changes in the auth process.  It really does not make any calls on its own.

Is it alarming to anyone else that supabase, who handles our auth, requires you to log back into the website every single time you visit it 😅 ?

My desktop stays logged in for a long period of time (days to weeks).  But if I turn on my VPN I have to login.  There must be some security to detect "same" device in the login to Supabase Dashboard.

Ah, maybe that's it - I use a vpn and have to log back in every time I visit the page

Sounds like that would be more secure if anything. 
If someone uses your computer they can do whatever to your DB

#ASK 
is there a push notification service which is very good with supabase???? For example like OneSignal, etc....
But IDK if OneSignal are perfect match with Supabase.....

What is the most efficient way to cause the page to re-render when auth changes?

I think supabase auth helpers package already has that. It's to setState inside the `onAuthStateChange` listener

If I login via a magic link in a different window, onAuthStateChange isn't fired in all other open windows

Based on https://github.com/supabase/supabase/issues/2739, it should be working but it isn't

Anyone working on running Supabase on top of Kubernetes?

Is it possible to create more than one project in Supabase Self Hosted?

No.  By design limited to one.  In general project management is not part of Studio self hosted.

Thank you for your answer, then I will move to Appwrite. A hug

The new Log Explorer seems great! Not seeing it in my DBs though, is it not released just yet?

Can I allow users to fetch some tables only by id? I want to avoid a moment when someone will try to select all records from table. I dont see that option with RTL, is custom backend for that the only way?

You can use RLS for select set to false.  Then create an rpc function which takes an id and returns a record for that row. The function needs to be set to security definer to skip RLS.  There is an example in help the past day or two from same question.

Hi guys!  Actually happy to know there's a Supabase Discord.