Edel Auth for Supabase

Сүрөттөө

This plugin integrates Supabase Authentication into your WordPress site, providing a secure, scalable, and modern membership system.
It allows you to completely separate “Site Administrators” (who use WordPress native auth) from “General Users” (who use Supabase auth).
This ensures your wp-admin remains secure while offering a seamless login experience for your customers.

Key Features

• Supabase Authentication: Support for Email/Password, Magic Links (Passwordless), and Social Login (Google).
• Auto Synchronization: Users created in Supabase are automatically synced to WordPress as subscribers upon login.
• Logout Synchronization: Logging out of WordPress automatically triggers a sign-out from Supabase to ensure session consistency.
• User Deletion Sync: Deleting a user in WordPress automatically removes the corresponding user from Supabase (Requires Service Role Key).
• Secure Admin Separation: Administrators are blocked from logging in via the frontend forms to prevent privilege escalation attacks.
• Smart Password Reset: Automatically detects if a user registered via Google and guides them to use the “Log in with Google” button instead of sending a reset email.
• Welcome Emails: Sends customizable “Welcome” emails directly from WordPress upon successful registration. Custom Sender Name and Email are supported.
• Keep Alive (Maintenance): Automatically accesses Supabase once a day to prevent free projects from pausing due to inactivity.
• Developer Friendly: Includes hooks for customizing user roles and syncing additional metadata.

Why use this plugin?

Unlike other plugins that sync the entire database, Edel Auth for Supabase authenticates users via the Supabase API on the frontend and only creates a WordPress user session when necessary.
This keeps your WordPress database clean and your site fast.

For Developers

You can customize the plugin behavior using the following hooks in your theme’s functions.php:

1. Change User Role based on Provider
Example: Assign the contributor role to users who register via Google, while keeping Email users as subscriber.
add_filter(‘eafs_user_role’, function($role, $user_data) {
// Check the provider (e.g., ‘google’, ’email’)
$provider = isset($user_data->app_metadata->provider) ? $user_data->app_metadata->provider : ”;

    if ($provider === 'google') {
        return 'contributor';
    }
    return $role;
}, 10, 2);

2. Sync Display Name
Example: Sync the “Display name” (checking display_name, full_name, or name in user_metadata) from Supabase to WordPress display_name.
add_action(‘eafs_after_user_sync’, function($user_id, $user_data, $is_new_user) {
$meta = isset($user_data->user_metadata) ? $user_data->user_metadata : null;
if (!$meta) return;

    // Check common keys for Display Name
    $name = '';
    if (isset($meta->display_name)) $name = $meta->display_name;
    elseif (isset($meta->full_name)) $name = $meta->full_name;
    elseif (isset($meta->name)) $name = $meta->name;

    if ($name) {
        wp_update_user(array('ID' => $user_id, 'display_name' => $name));
    }
}, 10, 3);

3. Record Last Login Time
Example: Save the timestamp of the last successful Supabase login to user meta.
add_action(‘eafs_after_user_sync’, function($user_id, $user_data, $is_new_user) {
update_user_meta($user_id, ‘last_supabase_login’, current_time(‘mysql’));
}, 10, 3);

Shortcodes

Use these shortcodes to place forms on your pages:

• [eafs_login] – Displays the login form.
• [eafs_register] – Displays the registration form.
• [eafs_forgot_password] – Displays the password reset request form.
• [eafs_update_password] – Displays the new password entry form (for the reset flow).
• [eafs_logout] – Displays a logout button (only visible to logged-in users).