External OAuth Provider Requests #451

J0 · 2022-04-19T01:56:02Z

This issue is for tracking requests/demand for integration with External OAuth Providers. Give a comment a thumbs up if you want the connector built or drop a comment if you wish to work on any of the providers below.

We will prioritise providers based on the number of upvotes/thumbs up so do upvote your favourite providers

J0 · 2022-04-19T01:58:41Z

Support Steam as an external OAuth Provider

Currently, Supabase does not support Steam as an external OAuth provider.

Describe the solution you'd like

Support Steam as an external OAuth Provider. https://partner.steamgames.com/doc/features/auth

Describe alternatives you've considered

N/A

Additional context

This article describes how Steam's login method works.

J0 · 2022-04-19T01:59:58Z

Add Patreon as OAuth provider

Support Patreon oauth.

Describe the solution you'd like

See feature request netlify/gotrue#312

J0 · 2022-04-19T02:01:40Z

Add Quickbooks as an OAuth provider

J0 · 2022-04-19T02:03:08Z

Add Orcid as an OAuth provider

Hi

I'd like to publish an app that other researchers can contribute to without signing up to anything, just using the orcid credentials they have for publishing to journals. Could you please add Orcid to the OAuth providers?

https://info.orcid.org/documentation/features/public-api/orcid-as-a-sign-in-option-to-your-system/

All the best and many thanks for the great work!

J0 · 2022-04-19T02:04:41Z

Add global.id as OAuth Provider

Link to homepage
Link to docs

Is your feature request related to a problem? Please describe.

Letting users in with a privacy-friendly OAuth Provider while accessing/verifying user data in a privacy-friendly manner if required.
For (at least currently) no cost.

Describe the solution you'd like

Adding global.id as sign-in/up option and storing requested data in the user metadata.

Describe alternatives you've considered

Didn't really find a good alternative to this provider.

Additional context

I would like to implement that but I have never used go before, nor do I have a clue on how to integrate it in the existing codebase.
Also, the global.id docs are somewhat odd and I've never really dealt with implementing OAuth.
Maybe it can be done similar to using Auth0 but instead, use global.id but idk. Article about Supabase with Auth0

J0 · 2022-04-19T02:06:36Z

Singpass login

Sign-in with Singpass
https://api.singpass.gov.sg/library/identiface/developers/backend-oauth2-jws

Note: Singapore government might move to use SGID

J0 · 2022-04-19T02:07:03Z

Foursquare/Swam login

Is your feature request related to a problem? Please describe.

Would love to be able to authenticate users with Foursquare/Swarm

Describe alternatives you've considered

Currently using passport-foursquare

J0 · 2022-04-19T02:09:25Z

SoundCloud Login

Please add SoundCloud OAuth provider.

Is your feature request related to a problem? Please describe.

To extend music streaming platform authentication.

Additional context

https://developers.soundcloud.com/docs/api/guide#authentication

Note: there is an existing PR -- #269 which contains an initial implementation

J0 · 2022-04-19T02:11:17Z

Ethereum Login

Is your feature request related to a problem? Please describe.

I'd like to let my users log in with their Eth wallet (Metamask, etc)

Describe the solution you'd like

Just like Uniswap does.

Describe alternatives you've considered

Looks like Redwood has an Eth login.

Additional context

n/a

Note: there is an existing PR -- #269 which contains an initial implementation

J0 · 2022-04-19T02:11:35Z

Auth0

Would it be possible to include Auth0 as a login provider. Would like transition over to Supabase however this is preventing me from doing so.

Describe alternatives you've considered

Tutorial on importing users from Auth0.

Relevant resources:

https://github.com/nextauthjs/next-auth/blob/main/src/providers/auth0.js

J0 · 2022-04-19T02:13:17Z

Tik Tok

TikTok recently published their OAuth flow
https://developers.tiktok.com/doc/login-kit-web

Is your feature request related to a problem? Please describe.

For the application that I am working on, we convert users from TikTok. Currently, we plan to authenticate them from using Phone authentication, but TikTok support could drastically improve our conversion.

Describe the solution you'd like

Social login with TikTok is supported similar to existing 3rd party providers.

Describe alternatives you've considered

The only other alternative would be to host our own authentication server and use it in tandem with Supabase. Not particularly ideal.

Additional context

Note: there is an existing PR -- #269 which contains an initial implementation

J0 · 2022-04-19T02:15:09Z

Netlify

Additional context

https://twitter.com/jlengstorf/status/1429611357356187652

https://app.netlify.com/user/applications

Relevant Comments:

Might need to hold off on this one until some of the security issues here are covered: https://community.redwoodjs.com/t/i-implemented-a-netlify-oauth-not-identity-auth-provider-but-im-not-sure-i-should-have-and-why/903

J0 · 2022-04-19T02:23:15Z

Kakao [ Completed ]

Requested on: supabase/supabase#5200

Developer docs: https://developers.kakao.com/product/kakaoLogin

Corresponding PR: #366

J0 · 2022-04-19T02:31:06Z

Add Snapchat as External OAuth Providers #436

Relevant PR: #449

purpleKarrot · 2024-09-16T11:45:43Z

Support GitHub Apps as provider

Both OAuth apps and GitHub Apps use OAuth 2.0.
In general, GitHub Apps are preferred over OAuth apps.
For more information, see "Differences between GitHub Apps and OAuth apps."

wolfspyre · 2024-10-19T04:18:11Z

I'd love to see Gitlab SELFHOSTED as an option for an auth provider.

Whats-A-MattR · 2024-10-21T04:19:04Z

I'd love to see Gitlab SELFHOSTED as an option for an auth provider.

I'm not sure that would serve the purpose of the project. That would only be useful for internal use cases, unless you're going to write it and submit a PR I can't see time being spent on this. Sorry to be blunt.

wolfspyre · 2024-10-21T04:40:59Z

I'd love to see Gitlab SELFHOSTED as an option for an auth provider.

I'm not sure that would serve the purpose of the project. That would only be useful for internal use cases, unless you're going to write it and submit a PR I can't see time being spent on this. Sorry to be blunt.

Heya, Matt!
I hear you, and both agree and disagree with you... :)

There's already a Gitlab provider, I'd expect that the only difference between the two is the endpoint.

Gitlab encourages self-hosting.
Github does not.

While many selfhosted rigs don't use legitimate ssl certs, the vast majority do.
I would expect that the only change needed would be to allow one to override the endpoints involved.

If it were truly that simple, I disagree with your assertion that it would serve the purpose of the project.

if it were NOT that simple, (I don't know, with confidence, one way or the other, quite honestly.) I can concede the point that time/energy spent likely aren't worth the effort.

However, assuming it is that simple, (hey, gotta be optimistic sometimes, right?) I don't see much of a downside... altho admittedly I'm likely missing some significant facet of complication due to ignorance ;)

so... can you help me understand what I'm missing? :)

Whats-A-MattR · 2024-10-21T04:47:30Z

The main thing I would suggest may prevent this is that the package is focused on Social Auth. ie. Everyone can have a Facebook account, or a Twitter Account, or Google, or x ,y ,z, etc. and if the developer chooses, they can use those services to authenticate.
Not everybody (I hope?) can have an account on YOUR GitLab, which is what differentiates it from hosted GitLab.
I can sign up for (hosted) GitLab right now, as a regular old user, and then sign in to a site made with Supabase, where GitLab is enabled as an Auth Provider using my GitLab account.
I cannot, however, simply sign up for your hosted GitLab - at least I shouldn't be able to as per my understanding where self-hosted GitLab is a companies own thing for their people only.

Hope that makes sense.

wolfspyre · 2024-10-21T05:29:05Z

The main thing I would suggest may prevent this is that the package is focused on Social Auth. ie. Everyone can have a Facebook account, or a Twitter Account, or Google, or x ,y ,z, etc. and if the developer chooses, they can use those services to authenticate. Not everybody (I hope?) can have an account on YOUR GitLab, which is what differentiates it from hosted GitLab. I can sign up for (hosted) GitLab right now, as a regular old user, and then sign in to a site made with Supabase, where GitLab is enabled as an Auth Provider using my GitLab account. I cannot, however, simply sign up for your hosted GitLab - at least I shouldn't be able to as per my understanding where self-hosted GitLab is a companies own thing for their people only.

Hope that makes sense.

Heya Matt!

First, thanks for talking about it :)

I appreciate the gift of your time and energy.

Thank you.

I think this might be where our lenses diverge...

I'll elucidate my perspective... my intent is not to argue or assert that one or the other is more 'right'.... Rather just trying to express the logic behind my reasoning.. (or what passes for logic between these ears ;) )

As I see it, The package is focused on facilitating external auth for a tool.
It's common for teams to want to offload the responsibility of user auth to $(notmyproblem)

Auth facilitates that offloading, by providing a conduit for brokering auth tokens.

Now, a vast majority of users will absolutely lean on ubiquitously-accessible services to provide those tokens, as such, I wholly agree with you that this functionality will only increase the utility derived from the tool for a small cohort of users.

However, that doesn't mean that there's no value in the ability to additionally support variant-instantiations of those ubiquitously-available services' facades for less-ubiquitously-available auth-brokers.
So long as it behaves the same
Admittedly, that's a significant caveat... and may cause more problems than it solves, as the support burden around snowflakes is .....
well... I don't need to tell you... :) you clearly already know :)

Nevertheless, Is the use-case for Auth ONLY for environments which are exposed to the public Internet?

I'd think that's kinda short-sighted, in that Auth shouldn't REALLY care who it's getting auth from, as
Its role is simply to be the abstraction layer between ${APP-DESIRING-AUTH-VALIDATION} and ${API-PERFORMING-AUTH-VALIDATION}; right?

The audience diversity of ${API-PERFORMING-AUTH-VALIDATION} isn't really relevant, is it?

Allowing customers to use their on-prem services to legitimize their users seems like a thing that devs would derive value from, rather than being burdened by....

I was simply figuring that an upside would be a reduction in external network traffic, latencies around auth, as well as greater flexibility offered to app devs to subsequently offer to their customers..

¯\_(ツ)_/¯

So.. that's the lens I was using when proposing this...
if the expectation is that Auth only provides value to tools that wish to use cloud-connected services, I can totally see why the idea has no merit.

Whats-A-MattR · 2024-10-21T06:18:17Z

However, that doesn't mean that there's no value in the ability to additionally support variant-instantiations of those ubiquitously-available services' facades for less-ubiquitously-available auth-brokers. So long as it behaves the same Admittedly, that's a significant caveat... and may cause more problems than it solves, as the support burden around snowflakes is ..... well... I don't need to tell you... :) you clearly already know :)

Yeah, quite burdensome - especially when each installation may differ and having to support different environments complicates things greatly.

Nevertheless, Is the use-case for Auth ONLY for environments which are exposed to the public Internet?

The issue I foresee isn't related to cloud or no, it's purely around number of uses that will make use of it.

I'd think that's kinda short-sighted, in that Auth shouldn't REALLY care who it's getting auth from, as Its role is simply to be the abstraction layer between ${APP-DESIRING-AUTH-VALIDATION} and ${API-PERFORMING-AUTH-VALIDATION}; right?

Completely correct, agreed.

The audience diversity of ${API-PERFORMING-AUTH-VALIDATION} isn't really relevant, is it?

Only in terms of priority, very few users would equate to low priority.

So.. that's the lens I was using when proposing this... if the expectation is that Auth only provides value to tools that wish to use cloud-connected services, I can totally see why the idea has no merit.

I think there is a slight miscommunication in my message. I am not saying that such an integration would be useless, more than because of the specificity of it's nature and the small cohort that may end up using this, allocating dev time may be a difficult ask.

I completely agree there is value in it, but it's substantially less value than a larger, less bespoke integration (bespoke in that there are many more variables for the IdP environment etc. despite being ~ hopefully ~ very similar to the cloud version).

I think dev time would be better spent on 'generic' and extensible connectors rather than bespoke solutions for on prem.
Ie. Generic SAML (already exists, could be better), Generic OIDC, Generic OAuth - therefore enabling users to integrate whatever suits their needs.

wolfspyre · 2024-10-21T20:08:26Z

concur on all. Glad to have interacted ;)

Thanks for your perspective and input...

Totes agree on priority, too. I was mostly just adding the request as if it's not made, there's no way for y'all to gauge interest

Thanks for reducing toil for devs. Its appreciated.
You're apprecaited.

❤️🐺w

## What kind of change does this PR introduce? This PR adds Kakao(https://accounts.kakao.com/) as an external provider. ## What is the current behavior? This provider did not exist before. ## What is the new behavior? Based on Kakao developer docs(https://developers.kakao.com/), this PR creates a provider & test suite for Kakao external provider. ## Additional context Please let me know if there are any changes needed, I do acknowledge that this was once mentioned in another [comment](supabase#451 (comment)), but it seemed like the PR had been frozen since then. I wrote my own version to make sure the tests do pass and the features work properly. --------- Co-authored-by: Kang Ming <[email protected]>

AlexAntonik · 2024-11-18T21:11:59Z

Support Google Play Games as provider

Almost every game on Android support Play Games Auth. Seamless(no login screen) authorization is musthave for games.

From my point of view flow is very similar for standart auth via google.
Probably useful info for integration

Some privious requests:
Game Center and Google Play Services integration #156

#601

goszczynskip · 2024-11-27T11:31:34Z

Support AT Protocol (incl. Bluesky) as a provider

This will allow to build applications on top of AT Protocol easily.

https://docs.bsky.app/blog/oauth-atproto
https://docs.bsky.app/docs/advanced-guides/oauth-client

mibressler · 2024-11-30T20:40:59Z

Support AT Protocol (incl. Bluesky) as a provider

This will allow to build applications on top of AT Protocol easily.

https://docs.bsky.app/blog/oauth-atproto https://docs.bsky.app/docs/advanced-guides/oauth-client

AGREE!

MrBE4R · 2024-12-04T10:40:13Z

Support Authentik as an external OAuth Provider

Describe the solution you'd like

Support Authentik as an external OAuth Provider.

Describe alternatives you've considered

N/A

Additional context

This article describes Authentik OAuth2 providers.

typed-sigterm · 2025-02-09T05:17:12Z

QQ as OAuth provider

QQ is the second most widely used social platform in China (the most one is WeChat). It has ~600 million monthly active users. Documents are here, thanks ❤️

maxrpark · 2025-02-17T07:03:42Z

Support Naver as Provider

According to recent information, Naver has approximately 40 million active users in South Korea, making it the dominant search engine in the country.

Having Kakao as auth provider is great but naver is more than necesary.

ekankr2 · 2025-02-17T07:40:04Z

Support Naver as Provider

I also think so

pharesdiego · 2025-02-21T12:18:15Z

Support Tiktok as an external OAuth Provider

Currently, Supabase does not support Titktok as an external OAuth provider.

Describe the solution you'd like

Support Tiktok as an external OAuth Provider. https://developers.tiktok.com/doc/login-kit-desktop

Describe alternatives you've considered

N/A

Additional context

This article describes how Tiktok's login method works.

This PR did implement Tiktok as a provider but was never merged because it was supposed to be opened as an individual PR for better readability and testing

Netz00 · 2025-02-23T21:21:18Z

Support Reddit as an external OAuth Provider

Describe the solution you'd like

Support Reddit as an external OAuth Provider.

Describe alternatives you've considered

N/A

Additional context

This article provides an overview of Reddit's OAuth2 providers. While the resource appears outdated, it remains functional.

SJunwikul · 2025-02-25T19:42:10Z

Support ARES as an external OAuth Provider

Describe the solution you'd like

Support ARES as an external OAuth Provider. This is necessary for partners to integrate ARES as a sign in option and the access token is required to call the IdP's APIs.

Describe alternatives you've considered

Using a third-party auth like Auth0 but that messes with the existing supabase auth and there's barely any documentation from Supabase about integrating Auth0. It doesn't work.

Additional context

https://pantheon-technologies.gitbook.io/ares-for-partners
https://joinares.com/partners

thealishakeri · 2025-03-03T20:19:06Z

Support Tiktok as an external OAuth Provider
Currently, Supabase does not support Titktok as an external OAuth provider.

Describe the solution you'd like
Support Tiktok as an external OAuth Provider. https://developers.tiktok.com/doc/login-kit-desktop

Describe alternatives you've considered
N/A

Additional context
This article describes how Tiktok's login method works.

#269 did implement Tiktok as a provider but was never merged because it was supposed to be opened as an individual PR for better readability and testing

jonkristian · 2025-03-05T11:51:13Z

Vipps OAuth Provider

Add support for Vipps, the no. 1 mobile payment provider in Norway - https://developer.vippsmobilepay.com/docs/APIs/login-api/

Additional context

https://github.com/orgs/supabase/discussions/14093

kayacancode · 2025-03-06T15:18:10Z

How about for Instagram?

golbin · 2025-03-30T09:40:07Z

Is there any update or rough timeline for this?

This issue has been open for a while, and having even a rough idea of the support timeline would be really helpful for Supabase users to plan their own product roadmaps accordingly.

dhamanutd · 2025-05-01T08:42:57Z

@thealishakeri I create PR again for TikTok, but no reviews from the team.
#1807

kyleorin · 2025-05-27T17:40:56Z

how about Snapchat as an authentication method ?

J0 added enhancement New feature or request good first issue Good for newcomers labels Apr 19, 2022

This was referenced Apr 19, 2022

Feature request: Add Steam as an external OAuth provider #417

Closed

Implement Patreon as an external provider #364

Closed

J0 mentioned this issue Apr 19, 2022

Add Quickbooks as an OAuth provider #331

Closed

J0 mentioned this issue Apr 19, 2022

New Auth provider: Orcid #339

Closed

This was referenced Apr 19, 2022

Adding Global.Id as OAuth Provider #350

Closed

New OAuth Provider: Sign-in with Singpass #340

Closed

This was referenced Apr 19, 2022

Add Foursquare/Swarm OAuth Provider #325

Closed

add SoundCloud OAuth Provider #258

Closed

J0 mentioned this issue Apr 19, 2022

Add Ethereum login #242

Closed

J0 mentioned this issue Apr 19, 2022

Add Auth0 as a Login Provider #215

Closed

This was referenced Apr 19, 2022

TikTok OAuth Provider #199

Closed

Netlify OAuth Provider #187

Closed

J0 mentioned this issue Apr 19, 2022

Add Kakao Oauth #363

Closed

J0 mentioned this issue Apr 19, 2022

Add Snapchat as External OAuth Providers #436

Closed

paustint mentioned this issue Sep 20, 2024

OIDC General IdP Config Option teamhanko/hanko#782

Closed

2 tasks

dhamanutd mentioned this issue Oct 18, 2024

Add TikTok Provider #1807

Open

steryereo mentioned this issue Mar 2, 2025

Migrate to supabase auth once it supports Strava as an OAuth provider steryereo/gnarday#28

Open

External OAuth Provider Requests #451

External OAuth Provider Requests #451

Comments

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Support Steam as an external OAuth Provider

Describe the solution you'd like

Describe alternatives you've considered

Additional context

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Add Patreon as OAuth provider

Describe the solution you'd like

Uh oh!

J0 commented Apr 19, 2022

Uh oh!

J0 commented Apr 19, 2022

Add Orcid as an OAuth provider

Uh oh!

J0 commented Apr 19, 2022

Add global.id as OAuth Provider

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Singpass login

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Foursquare/Swam login

Is your feature request related to a problem? Please describe.

Describe alternatives you've considered

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

SoundCloud Login

Is your feature request related to a problem? Please describe.

Additional context

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Ethereum Login

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Auth0

Describe alternatives you've considered

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Tik Tok

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

Uh oh!

J0 commented Apr 19, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Netlify

Additional context

Uh oh!

J0 commented Apr 19, 2022 • edited by kangmingtay Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Kakao [ Completed ]

Uh oh!

J0 commented Apr 19, 2022

Add Snapchat as External OAuth Providers #436

Uh oh!

purpleKarrot commented Sep 16, 2024

Support GitHub Apps as provider

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited

Loading

J0 commented Apr 19, 2022 •

edited by kangmingtay

Loading

wolfspyre commented Oct 21, 2024 •

edited

Loading

Whats-A-MattR commented Oct 21, 2024 •

edited

Loading

AlexAntonik commented Nov 18, 2024 •

edited

Loading

typed-sigterm commented Feb 9, 2025 •

edited

Loading

pharesdiego commented Feb 21, 2025 •

edited

Loading