Database Webhooks and Edge Functions

[@AnotherLeetcode]

This is the first source of information I found that explained how to protect a webhook url from non authorized webhook calls. Thank you!!

[@strangeQuirks]

Not sure I understand how the anon public key enforces authorization? Anyone can access it and therefore anyone can trigger this edge function.

[@manny7662]

Depends what your RLS looks like.

[@jetshu]

How do you manage the anon key when calling the function in the webhook when they are different between the local environment and the remote environment? I don't want to disable jwt-verification.

[@carlafuh9481]

I followed the SQL code on the docs to create a webhook that triggers an API. My problem is string concatenation don't work at API endpoint. I tried using NEW.column_name to get record which just added since my webhook listens for inserts but the code SQL compiler keeps giving a syntax error

[@loucasi]

Amazing presenters of Supabase very informative videos! Would you PLEASE make a video explaining best practices for handling time + timezones in & out of Supabase ? If you could add some specifics regarding Flutterflow and how it handles the issue - and how the two could come together - apart from helping my particular non coder situation could be the ONE video on the internet that shows best practices and rules to handle the "time" issue once and for all. PLEASE! 🤞 😅 🤕

[@sweeterasmus]

How is the email sending that you comment should be done? I found no information about it

[@trevordevelops]

the payload always returns undefined for me. Im using it on a table with multiple rows, web hook triggers on update. Any ideas why the body is failing to be passed in? I have the application/json header.

[@timmanning9]

Is this a real-time database or Postgres database? Does database web hooks work with both types?

[@yourpc]

but this webhooks doesn't make any sense, if I make insert\update\delete into table more then 1 row in one time (insert many, update many), functions won't execute at all. they only handle one table changes per one moment

[@yourpc]

oops, in my case if I updated many (10 rows) functions handle for 7 of them. P - performance. But not only for 1

[@ajaychandrasekaran9262]

This is nice for trigger on each row. Wish there was an easy way to do it for each statement and pass all newly inserted data as part of the POST body through the webhook UI. It's already possible through creating a trigger with transition tables from SQL editor for a table, then creating a function that uses pg_net and setting custom body for POST request. We first need support for creating triggers with transition tables as part of the database triggers ui to support this.

[@ConsenusCattle]

Don't trigger variables automatically be in the webhook payload and go to your edge function?

[@OlivierMARTINEAU]

Is there a sort of queuing ? Imagine, I insert 100 000 lines, are 100,000 functions going to be launched at the same time?

[@kevinloo9688]

Can you start a topic on SO or GH on this? I’ll be getting to the point where execution order will matter. Currently thinking of a simple delay function but that’s less than elegant

[@steve-chavez]

Yes. Underlyingly it uses the pg_net extension, which has a queue.

[@wesleybarnes5376]

So 100,000 functions will run in a queue? Just want some clarity, this wont be a problem?

[@jobiej7416]

How the you avoid the red squiggly lines that appear when you import a deno package?

[@adjust6744]

Do you have a deno workspace setup?

[@jobiej7416]

@@adjust6744 nope. I’m using CRA.

[@adjust6744]

@Jobie J you have to set that up on vs code. I've watched several of these videos. Not sure of he shows in this or not. This is for vscode 1. Install deno extension 2. Open up command pallette 3. Type deno workspace and enable it.

[@Supabase]

@@jobiej7416 When adding functions within a different workspace, e.g. react, we recommend a code workspaces setup like this: github.com/supabase/supabase/blob/master/examples/edge-functions/edge-functions.code-workspace . That way you can have a react project and a Deno project in the same workspace.

[@pedroaquino3042]

Thank you!! Really helpfull!

[@YaronLavi]

I might be super wrong here, but isn't it a security issue to be able to pull all the database tables out of a project's id? Can't you check someone's project id via dev tools? Awesome video, regardless :) Thank you very much!

[@mathias2860dk]

Not if you have security policies setup

[@Supabase]

That's why there are anon keys and RLS policies: supabase.com/docs/learn/auth-deep-dive/auth-row-level-security