Edel Auth for Supabase

This plugin integrates Supabase Authentication into your WordPress site, providing a secure, scalable, and modern membership system.
It allows you to completely separate “Site Administrators” (who use WordPress native auth) from “General Users” (who use Supabase auth).
This ensures your wp-admin remains secure while offering a seamless login experience for your customers.

Full Setup Guide

We have prepared a comprehensive guide to help you through the process, including Google Cloud Platform configuration and Supabase settings:
https://edel-hearts.com/edel-auth-for-supabase-guide/?display_lang=en

Key Features

• Supabase Authentication: Support for Email/Password, Magic Links (Passwordless), and Social Login (Google).
• Auto Synchronization: Users created in Supabase are automatically synced to WordPress as subscribers upon login.
• Logout Synchronization: Logging out of WordPress automatically triggers a sign-out from Supabase to ensure session consistency.
• User Deletion Sync: Deleting a user in WordPress automatically removes the corresponding user from Supabase (Requires Service Role Key).
• Secure Admin Separation: Administrators are blocked from logging in via the frontend forms to prevent privilege escalation attacks.
• Smart Password Reset: Automatically detects if a user registered via Google and guides them to use the “Log in with Google” button instead of sending a reset email.
• Welcome Emails: Sends customizable “Welcome” emails directly from WordPress upon successful registration. Custom Sender Name and Email are supported.
• Keep Alive (Maintenance): Automatically accesses Supabase once a day to prevent free projects from pausing due to inactivity.
• Developer Friendly: Includes hooks for customizing user roles and syncing additional metadata.

Why use this plugin?

Unlike other plugins that sync the entire database, Edel Auth for Supabase authenticates users via the Supabase API on the frontend and only creates a WordPress user session when necessary.
This keeps your WordPress database clean and your site fast.

For Developers

You can customize the plugin behavior using the following hooks in your theme’s functions.php:

1. Filter Hook: eafs_user_role
   This filter allows you to dynamically change the WordPress user role based on the Supabase provider (e.g., assigning a ‘contributor’ role to users who log in via Google).

2. Action Hook: eafs_after_user_sync
   This action triggers after a user is successfully synced from Supabase to WordPress. It is ideal for updating additional user metadata, such as syncing the display name or recording the last login timestamp.

3. Filter Hook: eafs_is_login_blocked
   Receives (bool $blocked, WP_User $user, object $supabase_user). Return true to deny frontend (Supabase) login for that WordPress user. By default only users with the manage_options capability are blocked.

4. Filter Hook: eafs_check_provider_max_pages
   Maximum number of pages (1,000 users per page) scanned when detecting the auth provider for the “Smart Password Reset” feature. Default: 10.

The standard wp_login action is also fired after a successful Supabase login, so login-tracking plugins work as expected.

Shortcodes

• [eafs_login] – Displays the login form.
• [eafs_register] – Displays the registration form.
• [eafs_forgot_password] – Displays the password reset request form.
• [eafs_update_password] – Displays the new password entry form (for the reset flow).
• [eafs_logout] – Displays a logout button (only visible to logged-in users).