Skip to content
Edge Functions

与 Supabase Auth 集成

Integrate Supabase Auth with Edge Functions

Edge Functions 可以与 Supabase Auth 一起使用。

🌐 Edge Functions work with Supabase Auth.

这让你可以：

🌐 This allows you to:

  • 通过传统 JWT 令牌自动识别用户
  • 执行行级别安全策略
  • 与你现有的认证流程集成

设置认证上下文 #

🌐 Setting up auth context

当用户向 Edge Function 发出请求时，你可以使用 Authorization 头在 Supabase 客户端中设置 Auth 上下文，并执行行级安全策略。

🌐 When a user makes a request to an Edge Function, you can use the Authorization header to set the Auth context in the Supabase client and enforce Row Level Security policies.

1
import { createClient } from 'npm:@supabase/supabase-js@2'
2
3
Deno.serve(async (req: Request) => {
4
  const supabaseClient = createClient(
5
    Deno.env.get('SUPABASE_URL') ?? '',
6
    Deno.env.get('SUPABASE_ANON_KEY') ?? '',
7
    // Create client with Auth context of the user that called the function.
8
    // This way your row-level-security (RLS) policies are applied.
9
    {
10
      global: {
11
        headers: { Authorization: req.headers.get('Authorization')! },
12
      },
13
    }
14
  );
15
16
  //...
17
})

正在获取用户 #

🌐 Fetching the user

通过从 Authorization 头获取 JWT，你可以把这个令牌提供给 getUser() 来获取用户对象，从而获取已登录用户的元数据。

🌐 By getting the JWT from the Authorization header, you can provide the token to getUser() to fetch the user object to obtain metadata for the logged in user.

1
Deno.serve(async (req: Request) => {
2
  // ...
3
  const authHeader = req.headers.get('Authorization')!
4
  const token = authHeader.replace('Bearer ', '')
5
  const { data } = await supabaseClient.auth.getUser(token)
6
  // ...
7
})

行级安全 #

🌐 Row Level Security

在使用 Auth 上下文初始化 Supabase 客户端后，所有查询都会以用户的上下文执行。对于数据库查询，这意味着会强制执行行级安全。

🌐 After initializing a Supabase client with the Auth context, all queries will be executed with the context of the user. For database queries, this means Row Level Security will be enforced.

1
import { createClient } from 'npm:@supabase/supabase-js@2'
2
3
Deno.serve(async (req: Request) => {
4
  // ...
5
  // This query respects RLS - users only see rows they have access to
6
  const { data, error } = await supabaseClient.from('profiles').select('*');
7
8
  if (error) {
9
    return new Response('Database error', { status: 500 })
10
  }
11
12
  // ...
13
})

示例 #

🌐 Example

查看完整的 示例在 GitHub 上。

🌐 See the full example on GitHub.

1
// Follow this setup guide to integrate the Deno language server with your editor:
2
// https://deno.land/manual/getting_started/setup_your_environment
3
// This enables autocomplete, go to definition, etc.
4
5
import { withSupabase } from 'npm:@supabase/server@^1'
6
7
console.log(`Function "select-from-table-with-auth-rls" up and running!`)
8
9
export default {
10
  fetch: withSupabase({ auth: 'user' }, async (req, ctx) => {
11
    try {
12
      // ctx.supabase runs queries as the authenticated user, so RLS applies.
13
      // ctx.userClaims holds the verified user identity.
14
      const { data, error } = await ctx.supabase.from('users').select('*')
15
      if (error) throw error
16
17
      return Response.json({ user: ctx.userClaims, data })
18
    } catch (error) {
19
      return Response.json({ error: error.message }, { status: 400 })
20
    }
21
  }),
22
}
23
24
// To invoke (auth: 'user' requires a signed-in user's access token):
25
// curl -i --location --request POST 'http://localhost:54321/functions/v1/select-from-table-with-auth-rls' \
26
//   --header 'Authorization: Bearer <USER_ACCESS_TOKEN>' \
27
//   --header 'Content-Type: application/json' \
28
//   --data '{"name":"Functions"}'
View source