Hi, I've been playing around with the supabase-custom-claims repo and I've run into a bit of a problem with request.jwt.claims

Hello @derpwingduk! This thread has been automatically created from your message in #843999948717555735 a few seconds ago. We have already mentioned the @User so that they can see your message and help you as soon as possible! Want to unsubscribe from this thread? Right-click the thread in Discord (or use the ``...`` menu) and select "Leave Thread" to unsubscribe from future updates. Want to change the title? Use the ``/title`` command! We have solved your problem? Click the button below to archive it.

I'm not sure what is causing this, but on a Supabase project that I've been working with for months, when I try to run the

get_my_claims()

function from supabase-custom-claims, I get an empty object.

Is this a SB instance or local. The claims code changed a bit when PostgREST 9 came out. I don’t have the date handy, but it was several months to 6 ago. The system should deal with both, but there is a flag for backward compatibility. https://postgrest.org/en/stable/api.html#http-context

Aha ok; it's a hosted SB instance

Can you throw an issue on that repository pointing that out for others.

Sure thing 👍

Thread was archived by @derpwingduk. Anyone can send a message to unarchive it.

@edelacruz Maybe this is something relevant to your issue?

@jaitaiwan I solved my problem by creating a new project. I probably messed up something in my first project that is preventing auth.uid() to work properly. I just created a brand new project, created some users/logins and now it works like a charm. Here is my working function in case you are interested.

-- drop function get_all_users;
create or replace function get_all_users() 
  returns table (
    user_email varchar,
    user_name text,
    user_role text
  )
  language plpgsql
  security definer set search_path = auth
  as $$ 
  declare user_role text;
  begin
    select raw_user_meta_data->>'role' 
      from auth.users
      into user_role
      where id = auth.uid();
    if user_role <> 'admin' then
      raise notice 'User Role: %', user_role;
      return;
    else
      return query
        select
          u.email,
          u.raw_user_meta_data->>'name' as name,
          u.raw_user_meta_data->>'role' as role
          from auth.users u;
    end if;
end $$;

Great job

@jaitaiwan Thanks. Except I need to use app_metadata instead of user_metadata. Also I probably do not need to do the search in the database. The role is in the JWT. Here is a nice article: https://dev.to/supabase/supabase-custom-claims-34l2