External OAuth Provider Requests #451

J0 · 2022-04-19T01:56:02Z

This issue is for tracking requests/demand for integration with External OAuth Providers. Give a comment a thumbs up if you want the connector built or drop a comment if you wish to work on any of the providers below.

We will prioritise providers based on the number of upvotes/thumbs up so do upvote your favourite providers

J0 · 2022-04-19T01:58:41Z

Support Steam as an external OAuth Provider

Currently, Supabase does not support Steam as an external OAuth provider.

Describe the solution you'd like

Support Steam as an external OAuth Provider. https://partner.steamgames.com/doc/features/auth

Describe alternatives you've considered

N/A

Additional context

This article describes how Steam's login method works.

J0 · 2022-04-19T01:59:58Z

Add Patreon as OAuth provider

Support Patreon oauth.

Describe the solution you'd like

See feature request netlify/gotrue#312

J0 · 2022-04-19T02:01:40Z

Add Quickbooks as an OAuth provider

J0 · 2022-04-19T02:03:08Z

Add Orcid as an OAuth provider

Hi

I'd like to publish an app that other researchers can contribute to without signing up to anything, just using the orcid credentials they have for publishing to journals. Could you please add Orcid to the OAuth providers?

https://info.orcid.org/documentation/features/public-api/orcid-as-a-sign-in-option-to-your-system/

All the best and many thanks for the great work!

J0 · 2022-04-19T02:04:41Z

Add global.id as OAuth Provider

Link to homepage
Link to docs

Is your feature request related to a problem? Please describe.

Letting users in with a privacy-friendly OAuth Provider while accessing/verifying user data in a privacy-friendly manner if required.
For (at least currently) no cost.

Describe the solution you'd like

Adding global.id as sign-in/up option and storing requested data in the user metadata.

Describe alternatives you've considered

Didn't really find a good alternative to this provider.

Additional context

I would like to implement that but I have never used go before, nor do I have a clue on how to integrate it in the existing codebase.
Also, the global.id docs are somewhat odd and I've never really dealt with implementing OAuth.
Maybe it can be done similar to using Auth0 but instead, use global.id but idk. Article about Supabase with Auth0

J0 · 2022-04-19T02:06:36Z

Singpass login

Sign-in with Singpass
https://api.singpass.gov.sg/library/identiface/developers/backend-oauth2-jws

Note: Singapore government might move to use SGID

J0 · 2022-04-19T02:07:03Z

Foursquare/Swam login

Is your feature request related to a problem? Please describe.

Would love to be able to authenticate users with Foursquare/Swarm

Describe alternatives you've considered

Currently using passport-foursquare

J0 · 2022-04-19T02:09:25Z

SoundCloud Login

Please add SoundCloud OAuth provider.

Is your feature request related to a problem? Please describe.

To extend music streaming platform authentication.

Additional context

https://developers.soundcloud.com/docs/api/guide#authentication

Note: there is an existing PR -- #269 which contains an initial implementation

J0 · 2022-04-19T02:11:17Z

Ethereum Login

Is your feature request related to a problem? Please describe.

I'd like to let my users log in with their Eth wallet (Metamask, etc)

Describe the solution you'd like

Just like Uniswap does.

Describe alternatives you've considered

Looks like Redwood has an Eth login.

Additional context

n/a

Note: there is an existing PR -- #269 which contains an initial implementation

J0 · 2022-04-19T02:11:35Z

Auth0

Would it be possible to include Auth0 as a login provider. Would like transition over to Supabase however this is preventing me from doing so.

Describe alternatives you've considered

Tutorial on importing users from Auth0.

Relevant resources:

https://github.com/nextauthjs/next-auth/blob/main/src/providers/auth0.js

J0 · 2022-04-19T02:13:17Z

Tik Tok

TikTok recently published their OAuth flow
https://developers.tiktok.com/doc/login-kit-web

Is your feature request related to a problem? Please describe.

For the application that I am working on, we convert users from TikTok. Currently, we plan to authenticate them from using Phone authentication, but TikTok support could drastically improve our conversion.

Describe the solution you'd like

Social login with TikTok is supported similar to existing 3rd party providers.

Describe alternatives you've considered

The only other alternative would be to host our own authentication server and use it in tandem with Supabase. Not particularly ideal.

Additional context

Note: there is an existing PR -- #269 which contains an initial implementation

J0 · 2022-04-19T02:15:09Z

Netlify

Additional context

https://twitter.com/jlengstorf/status/1429611357356187652

https://app.netlify.com/user/applications

Relevant Comments:

Might need to hold off on this one until some of the security issues here are covered: https://community.redwoodjs.com/t/i-implemented-a-netlify-oauth-not-identity-auth-provider-but-im-not-sure-i-should-have-and-why/903

J0 · 2022-04-19T02:23:15Z

Kakao [ Completed ]

Requested on: supabase/supabase#5200

Developer docs: https://developers.kakao.com/product/kakaoLogin

Corresponding PR: #366

J0 · 2022-04-19T02:31:06Z

Add Snapchat as External OAuth Providers #436

Relevant PR: #449

pythonicode · 2023-01-05T15:10:56Z

Strava

Very important integrations for any sport-related applications.

Strava Docs: https://developers.strava.com/docs/authentication/

pythonicode · 2023-01-05T15:11:49Z

Garmin Connect

Optionally, another important connection for sport-related apps. I don't know it it supports OAuth2 but seems to support OAuth1 but it looks more complicated to get setup than Strava.

Docs: https://developer.garmin.com/gc-developer-program/program-faq/

J0 · 2023-01-25T14:46:55Z

Provider request: Mastodon

Is your feature request related to a problem? Please describe.

Mastodon is growing in popularity and could be very useful to add as an auth provider.

Additional context

Due to the federated nature of mastodon, I think login can be setup per-server instance.

I'm not exactly sure how to reflect that.

romanticsoul · 2023-02-15T05:37:30Z

Yandex ID and VK ID

Please add the possibility of OAuth via Yandex ID and VK ID

Yandex ID: click
VK ID: click

These services are the largest authorization providers in the CIS countries

keepant · 2023-03-02T04:32:05Z

Provider Request: Huawei

It would be nice if users could authenticate with Huawei Auth. Huawei has many users in Asia-Pacific countries.
Thank you.

Additional context

Documentation: Huawei Auth

## What kind of change does this PR introduce? This PR adds Kakao(https://accounts.kakao.com/) as an external provider. ## What is the current behavior? This provider did not exist before. ## What is the new behavior? Based on Kakao developer docs(https://developers.kakao.com/), this PR creates a provider & test suite for Kakao external provider. ## Additional context Please let me know if there are any changes needed, I do acknowledge that this was once mentioned in another [comment](#451 (comment)), but it seemed like the PR had been frozen since then. I wrote my own version to make sure the tests do pass and the features work properly. --------- Co-authored-by: Kang Ming <kang.ming1996@gmail.com>

rohanliston · 2023-07-19T08:34:02Z

Add generic OAuth2/OIDC provider

A generic OAuth2/OIDC provider similar to what Auth0 offers would cover most (if not all) of the provider requests in this thread in one hit.

This would enable developers to simply provide, at a minimum:

Authorisation Server URL (which provides a .well-known/openid-configuration endpoint to discover token URLs etc).
Client ID
Client Secret
Callback URL
(maybe) a mapping for claims?

I'm surprised this hasn't already been suggested. Is there some complexity that I'm missing?

kangmingtay · 2023-07-31T17:18:43Z

Hey @rohanliston, great question! not all social providers comply to the OIDC spec and might not have an authorization server URL. As for the mapping for claims, not all the social providers return the user data the same way (take linkedin vs workos for e.g.). Also, gotrue currently follows an automatic linking model to link 2 identities with the same email to the same user. This means that having an insecure oauth provider added could compromise logins for a user. This is also why we currently enforce the email returned from the oauth provider to be verified.

kangmingtay · 2023-07-31T17:19:49Z

Add Yahoo as OAuth provider

Support Yahoo oauth.

Describe the solution you'd like

See feature request #1191

rohanliston · 2023-08-03T00:09:48Z

@kangmingtay Thanks for your response! To address your points:

not all social providers comply to the OIDC spec and might not have an authorization server URL.

That's fine, there are still countless providers that are OIDC-compliant. The ones that aren't compliant would require a dedicated provider as they do now. I don't think this is a reason not to implement a generic provider.

As for the mapping for claims, not all the social providers return the user data the same way (take linkedin vs workos for e.g.).

Yep, we'd definitely need a mapper of some sort. A simple approach would be to have the user define a JSON object to define the mapping. Dot notation could be used to map nested fields.

Also, gotrue currently follows an automatic linking model to link 2 identities with the same email to the same user. This means that having an insecure oauth provider added could compromise logins for a user. This is also why we currently enforce the email returned from the oauth provider to be verified.

Does gotrue require the user to authenticate to both accounts before linking? Relying on email verification alone isn't totally secure, because the account can still be compromised later on. Email verification only proves that the user had control of the account when it was created.

Auth0 highlights this in their docs and has a secure approach to account linking in their Account Link Extension:

The extension does not automatically link users with the same email, even if emails are verified,
because verified emails are not enough evidence to prove that the user can currently authenticate
to both accounts.

...

This process [of authenticating to both accounts at link time] ensures that the user has the credentials
to authenticate to both accounts, which allows the accounts to be linked safely and correctly.

Regardless, I think whether or not an external provider is 'secure' should be a concern of the application developer setting up the integration. Gotrue should merely provide the means to support the integration itself in a secure way within its own sphere of control.

paustint · 2023-10-01T14:29:03Z

Support Salesforce as an OAuth Provider

Currently, Supabase does not support Salesforce as an external OAuth provider.

Describe the solution you'd like

Suport Salesforce as an OAuth provider https://login.salesforce.com/.well-known/openid-configuration

Describe alternatives you've considered

N/A

Additional context

Well-known config: https://login.salesforce.com/.well-known/openid-configuration
Docs: https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_web_server_flow.htm&type=5

NOTE: Salesforce allows users to configure custom subdomains for their environments, but support for this would not be required as the user can go to the standard login page (login.salesforce.com and login their, unless explicitly disallowed, in which case they can choose "Use Custom Domain".

In order to test this flow:

Get a free developer edition org - https://developer.salesforce.com/signup
In setup menu, go to "App Manager" and choose "New Connected App"
Enter required fields and select "Enable OAuth Settings"
Specify callback URL and choose some default scopes (scopes can be overridden at runtime) and save
Click Manage Consumer Details to see the client id and client secret

carlobeltrame · 2023-10-08T19:08:17Z

Add generic OAuth2/OIDC provider

#451 (comment)

I'd like to work on a generic OAuth2 provider. Since the comments of @rohanliston in August, @kangmingtay has updated the CONTRIBUTING.md text to suggest that such a generic provider is officially regarded as a possible way forward.

By default, I would go for a generic OAuth2 client, similar to the one described by the auth0 docs. This is as opposed to a generic OIDC flow, which was previously present in gotrue but was then removed in #927, for reasons which are explained here, and which sound like the Supabase team needs to resolve things internally first. If the generic OAuth2 client is the wrong direction to head in, please let me know.

Edit: See #1372 for the PR.

MonsterDeveloper · 2023-10-09T16:41:49Z

@J0 any updates on the Telegram provider? It has been more than a year now since its request, and as far as I can see it is one of the most requested providers in this thread.

Mutondi · 2023-10-23T04:58:52Z

Add generic OAuth2/OIDC provider

A generic OAuth2/OIDC provider similar to what Auth0 offers would cover most (if not all) of the provider requests in this thread in one hit.

This would enable developers to simply provide, at a minimum:

Authorisation Server URL (which provides a .well-known/openid-configuration endpoint to discover token URLs etc).

Client ID

Client Secret

Callback URL

(maybe) a mapping for claims?

I'm surprised this hasn't already been suggested. Is there some complexity that I'm missing?

Is there any progress on this?

stripuramallu3 · 2023-10-24T05:54:41Z

Linear

I would like Linear as an OAuth Provider

Documentation: https://developers.linear.app/docs/oauth/authentication

carlobeltrame · 2023-10-24T09:03:03Z

Is there any progress on this?

@Mutondi I have started working on it, currently I am looking into how I can extend the database schema in order to store the additional information required for genericity, such as the field mapping.

I could use this extension myself in February 2024. So if you have the time to test the feature with your own provider once I open the PR, that would be great news.

Edit: See #1372 for the PR.

Whats-A-MattR · 2023-11-22T03:42:28Z

Support Steam as an external OAuth Provider

Currently, Supabase does not support Steam as an external OAuth provider.

Describe the solution you'd like

Support Steam as an external OAuth Provider. https://partner.steamgames.com/doc/features/auth

Describe alternatives you've considered

N/A

Additional context

This article describes how Steam's login method works.

Is there an ETA for Steam as an Auth Provider? Or even a Custom Provider option?

jessebot · 2023-11-30T18:43:46Z

Support Zitadel as a provider

Please consider adding support for ZITADEL. I see there is already KeyCloak support, so I could try to copy that for Zitadel, as in most instances Zitadel drops in as a replacement pretty fine as both are OIDC compliant and common self-hosted open source Identity Providers.

I am not sure if I should hold off on it based on the comment in the CONTRIBUTING.md. Let me know if I should go ahead and work on this.

But I did also find this in the code so maybe I don't need to do this after all?:
https://github.com/supabase/gotrue/blob/379b06665052261122482acf2c9d47e81346f1a4/internal/api/provider/oidc.go#L329-L340

Still happy to do the work, just need a little guidance 🙏

carlobeltrame · 2024-01-10T15:27:25Z

@Mutondi, @rohanliston, @kangmingtay, @bdelwood, @James3UK, @sannajammeh, @bluengreen, @jessebot, @chrisjh, @agrantdeakin, @mstade, @WildEgo, @kermado, @JoaquimLey, @naohiro-t, @BayTec, @jamiefolsom, @point-source, @Whats-A-MattR and everyone else who has mentioned or reacted to a generic OAuth provider:

I have implemented a first version of a generic OAuth provider at #1372.

If you have the means, it would help a great deal if you could test it with some real-life identity providers (even ones which are already supported by gotrue would help). I have so far tested it using an application of my own. But the more we can test this new all-purpose OAuth provider the merrier.

rahul3399 · 2024-01-31T04:52:35Z

add miniOrange as OAuth Provider

Wintersboy · 2024-02-14T06:51:17Z

Would love to see Yahoo in the list of auth providers. Would make accessing the Yahoo Fantasy API so much better.

MiryangJung · 2024-03-07T13:14:18Z

Is there any progress on the generic OAuth provider, is possible submit PR that adds another social login provider?

biblebreeze · 2024-04-11T07:17:16Z

Add Yahoo as OAuth provider

Support Yahoo oauth.

Describe the solution you'd like

See feature request #1191

Any feedback on adding Yahoo oauth?
https://developer.yahoo.com/oauth2/guide/

FredrikCarlssn · 2024-04-18T14:32:15Z

Epic as OAuth provider

Saw this request in the discussions and thought I will bump it by posting it here as well.

Would be great to see this feature being added!

J0 added enhancement New feature or request good first issue Good for newcomers labels Apr 19, 2022

This was referenced Apr 19, 2022

Feature request: Add Steam as an external OAuth provider #417

Closed

Implement Patreon as an external provider #364

Closed

J0 mentioned this issue Apr 19, 2022

Add Quickbooks as an OAuth provider #331

Closed

J0 mentioned this issue Apr 19, 2022

New Auth provider: Orcid #339

Closed

This was referenced Apr 19, 2022

Adding Global.Id as OAuth Provider #350

Closed

New OAuth Provider: Sign-in with Singpass #340

Closed

This was referenced Apr 19, 2022

Add Foursquare/Swarm OAuth Provider #325

Closed

add SoundCloud OAuth Provider #258

Closed

J0 mentioned this issue Apr 19, 2022

Add Ethereum login #242

Closed

J0 mentioned this issue Apr 19, 2022

Add Auth0 as a Login Provider #215

Closed

This was referenced Apr 19, 2022

TikTok OAuth Provider #199

Closed

Netlify OAuth Provider #187

Closed

J0 mentioned this issue Apr 19, 2022

Add Kakao Oauth #363

Closed

J0 mentioned this issue Apr 19, 2022

Add Snapchat as External OAuth Providers #436

Closed

J0 mentioned this issue Jan 25, 2023

Add Mastodon as auth provider #815

Closed

kangmingtay mentioned this issue Mar 9, 2023

Added Support for Msg91 phone provider #989

Closed

kangmingtay mentioned this issue Jul 31, 2023

Yahoo Auth Provider #1191

Closed

jessebot mentioned this issue Nov 30, 2023

[FR] self-hosted OIDC authentication via Zitadel/Keycloak AppFlowy-IO/AppFlowy-Cloud#189

Open

carlobeltrame mentioned this issue Jan 10, 2024

Generic OAuth provider #1372

Open

hf mentioned this issue Jan 19, 2024

Feature Request: Add Logto OIDC Provider Functionality #881

Closed

External OAuth Provider Requests #451

External OAuth Provider Requests #451

Comments

J0 commented Apr 19, 2022 • edited

J0 commented Apr 19, 2022 • edited

Support Steam as an external OAuth Provider

Describe the solution you'd like

Describe alternatives you've considered

Additional context

J0 commented Apr 19, 2022 • edited

Add Patreon as OAuth provider

Describe the solution you'd like

J0 commented Apr 19, 2022

J0 commented Apr 19, 2022

Add Orcid as an OAuth provider

J0 commented Apr 19, 2022

Add global.id as OAuth Provider

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

J0 commented Apr 19, 2022 • edited

Singpass login

J0 commented Apr 19, 2022 • edited

Foursquare/Swam login

Is your feature request related to a problem? Please describe.

Describe alternatives you've considered

J0 commented Apr 19, 2022 • edited

SoundCloud Login

Is your feature request related to a problem? Please describe.

Additional context

J0 commented Apr 19, 2022 • edited

Ethereum Login

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

J0 commented Apr 19, 2022 • edited

Auth0

Describe alternatives you've considered

J0 commented Apr 19, 2022 • edited

Tik Tok

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

J0 commented Apr 19, 2022 • edited

Netlify

Additional context

J0 commented Apr 19, 2022 • edited by kangmingtay

Kakao [ Completed ]

J0 commented Apr 19, 2022

Add Snapchat as External OAuth Providers #436

pythonicode commented Jan 5, 2023

Strava

pythonicode commented Jan 5, 2023

Garmin Connect

J0 commented Jan 25, 2023 • edited

Provider request: Mastodon

Is your feature request related to a problem? Please describe.

Additional context

romanticsoul commented Feb 15, 2023

Yandex ID and VK ID

keepant commented Mar 2, 2023 • edited

Provider Request: Huawei

Additional context

rohanliston commented Jul 19, 2023

Add generic OAuth2/OIDC provider

kangmingtay commented Jul 31, 2023

kangmingtay commented Jul 31, 2023

Add Yahoo as OAuth provider

Describe the solution you'd like

rohanliston commented Aug 3, 2023

paustint commented Oct 1, 2023

Support Salesforce as an OAuth Provider

Describe the solution you'd like

Describe alternatives you've considered

Additional context

carlobeltrame commented Oct 8, 2023 • edited

Add generic OAuth2/OIDC provider

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited

J0 commented Apr 19, 2022 •

edited by kangmingtay

J0 commented Jan 25, 2023 •

edited

keepant commented Mar 2, 2023 •

edited

carlobeltrame commented Oct 8, 2023 •

edited

carlobeltrame commented Oct 24, 2023 •

edited

jessebot commented Nov 30, 2023 •

edited

FredrikCarlssn commented Apr 18, 2024 •

edited