Skip authorization check on Edge Functions

[deliqs]

Hi,

I'd like to connect some webhooks to certain Edge Functions on my project, but the Edge Function return a 401 (Unauthorized). I unfortunately cannot add auth headers to the web hook. Is there any way around this?

[kevinclarkadstech]

Hi,

I'd like to connect some webhooks to certain Edge Functions on my project, but the Edge Function return a 401 (Unauthorized). I unfortunately cannot add auth headers to the web hook. Is there any way around this?

That would be a big security hole, depending on what the function does. You usually can attach some sort of state query parameter to web hooks and OAuth redirects. Could you do that to at least create your own sort of API key?

[flogy]

It would be awesome if we could have some configuration file for the edge functions that can be added to version control. Like that we could disable the JWT check for specific functions and it will never reset it when deploying said function, even if the --no-verify-jwt was not added. What do you think?

Just realized this is now possible: https://supabase.com/docs/reference/cli/config#functions.function_name.verify_jwt

E.g. add the following to your config.toml to disable verifying JWT token for the function helloworld:

[functions.helloworld]
verify_jwt = false

[garylake]

@flogy thanks for this, even better, the config.toml solution works when serving them locally too 👍🏻

[alijawad1511]

@deliqs can you please tell me how you resolved the above issue you mentioned? I am stuck at that issue of 401 error

[justinekatebe]

config.toml

goto your config.toml file, and add this code to your file. *Please note that you have to replace "function_name" with the name of the function you want to skip jwt auth.

[functions.function_name]
verify_jwt = false

[AebadUQ]

https://<project_id>.supabase.co/functions/v1/oauth-facebook
api status is pending and not giving me response
fetch("https://<project_id>.supabase.co/functions/v1/oauth-facebook", {
method: "POST",

    body: JSON.stringify({ code }),
  })
    .then((res) => res.json())
    .then((data) => {
      console.log("Connection success", data);
    //   navigate("/dashboard");
    })
    .catch(console.error);
}