feat: Add Supabase Integration #15719

onurtemizkan · 2025-03-18T09:59:49Z

Summary:

Ports https://github.com/supabase-community/sentry-integration-js into @sentry/core
Adds support for auth and auth.admin operations
Adds browser integration tests
Adds E2E tests running on NextJS

github-actions · 2025-03-18T10:06:21Z

size-limit report 📦

Path	Size	% Change	Change
@sentry/browser	23.2 KB	-	-
@sentry/browser - with treeshaking flags	23.02 KB	-	-
@sentry/browser (incl. Tracing)	36.83 KB	-	-
@sentry/browser (incl. Tracing, Replay)	73.99 KB	-	-
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	67.39 KB	-	-
@sentry/browser (incl. Tracing, Replay with Canvas)	78.66 KB	-	-
@sentry/browser (incl. Tracing, Replay, Feedback)	91.22 KB	-	-
@sentry/browser (incl. Feedback)	40.33 KB	-	-
@sentry/browser (incl. sendFeedback)	27.83 KB	-	-
@sentry/browser (incl. FeedbackAsync)	32.63 KB	-	-
@sentry/react	25 KB	-	-
@sentry/react (incl. Tracing)	38.75 KB	-	-
@sentry/vue	27.41 KB	-	-
@sentry/vue (incl. Tracing)	38.55 KB	-	-
@sentry/svelte	23.23 KB	-	-
CDN Bundle	24.44 KB	-	-
⛔️ CDN Bundle (incl. Tracing) (max: 38.09 KB)	38.23 KB	+3.76%	+1.38 KB 🔺
CDN Bundle (incl. Tracing, Replay)	73.21 KB	+1.88%	+1.34 KB 🔺
CDN Bundle (incl. Tracing, Replay, Feedback)	78.39 KB	+1.71%	+1.32 KB 🔺
CDN Bundle - uncompressed	71.24 KB	-	-
CDN Bundle (incl. Tracing) - uncompressed	112.73 KB	+3.48%	+3.79 KB 🔺
CDN Bundle (incl. Tracing, Replay) - uncompressed	224.02 KB	+1.73%	+3.79 KB 🔺
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	236.59 KB	+1.63%	+3.79 KB 🔺
@sentry/nextjs (client)	40.06 KB	-	-
@sentry/sveltekit (client)	37.26 KB	-	-
@sentry/node	142.9 KB	-	-
@sentry/node - without tracing	96.1 KB	-	-
@sentry/aws-serverless	120.45 KB	-	-

View base workflow run

smeubank · 2025-03-28T09:29:33Z

lookin good @onurtemizkan! part of getting this in will be updating the docs, and we can do some changelog post and updates to landing page, but i can help with all that it's simple

onurtemizkan · 2025-03-28T10:36:54Z

@smeubank thanks, it would be great! We can then merge in queues support separately.

s1gr1d · 2025-04-01T09:00:43Z

packages/core/src/integrations/supabase.ts

+  AUTH_ADMIN_OPERATIONS_TO_INSTRUMENT.forEach((operation: AuthAdminOperationName) => {
+    const authAdminOperation = auth.admin[operation];
+    if (typeof authAdminOperation === 'function') {
+      auth.admin[operation] = instrumentAuthOperation(authAdminOperation);


Doesn't this need the isAdmin as a second parameter if it is an admin operation? 🤔

Maybe also add a test for the admin behavior.

s1gr1d · 2025-04-01T09:16:51Z

packages/core/src/integrations/supabase.ts

+
+function instrumentSupabaseAuthClient(supabaseClientInstance: SupabaseClientInstance): void {
+  const auth = supabaseClientInstance.auth;
+


Do we need to check for instrumented.has() here as well?

s1gr1d · 2025-04-01T09:25:57Z

packages/core/src/integrations/supabase.ts

+type AuthOperationFn = (...args: unknown[]) => Promise<unknown>;
+type AuthOperationName = (typeof AUTH_OPERATIONS_TO_INSTRUMENT)[number];
+type AuthAdminOperationName = (typeof AUTH_ADMIN_OPERATIONS_TO_INSTRUMENT)[number];
+type PostgrestQueryOperationName = (typeof AVAILABLE_OPERATIONS)[number];


Just to be sure: This is PostgREST and not PostgreSQL?

Super Nit: Call the variable PostgREST.... so it's easier to read and understand. As it was lower-case, I read PostgreSQL at first sight.

Also valid for all other variable names in the file. But ignore this comment if you think this is not necessary.

I believe yes @s1gr1d. Some more context here

supabase-community/sentry-integration-js#5 (comment)

and

getsentry/relay#3153

s1gr1d · 2025-04-01T09:37:00Z

packages/core/src/integrations/supabase.ts

+        const table = pathParts.length > 0 ? pathParts[pathParts.length - 1] : '';
+        const description = `from(${table})`;
+
+        const query: string[] = [];


As it's an array, I would suggest adding items to the name. "Query" kinda suggests it's a string.

Suggested change

const query: string[] = [];

const queryItems: string[] = [];

packages/core/src/integrations/supabase.ts

s1gr1d · 2025-04-01T09:47:12Z

packages/core/src/integrations/supabase.ts

+  };
+}) satisfies IntegrationFn;
+
+export const supabaseIntegration = defineIntegration((supabaseClient: unknown) => {


~~Should the supabaseIntegration be added by default? If yes, then you should add it to getDefaultIntegrations.~~

Edit: Ah, as the supabase client needs to be passed, it actually cannot be default 🤔

s1gr1d · 2025-04-01T09:49:37Z

dev-packages/e2e-tests/test-applications/supabase-nextjs/README.md

It's fine to delete this file if it's empty

s1gr1d · 2025-04-01T09:51:01Z

dev-packages/e2e-tests/test-applications/supabase-nextjs/lib/initSupabaseAdmin.ts

+// These are the default development keys for a local Supabase instance
+const NEXT_PUBLIC_SUPABASE_URL = 'http://localhost:54321';
+const SUPABASE_SERVICE_ROLE_KEY =
+  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU';


Is it okay to leave this here? Or should we rather add this to the environment?

Same for NEXT_PUBLIC_SUPABASE_ANON_KEY

These are default local supabase server keys. I think it's ok to leave them here.

Co-authored-by: Sigrid Huemer <[email protected]>

lforst

A first pass - but it's already looking great!

lforst · 2025-04-07T13:43:53Z

packages/core/src/integrations/supabase.ts

+export const supabaseIntegration = defineIntegration((supabaseClient: unknown) => {
+  return {


Different comment here: The client as a simple first arg leaves us a bit unflexible in the future. I would almost make the integration accept an options object with a supabaseClient property.

lforst · 2025-04-07T13:44:39Z

packages/core/src/integrations/supabase.ts

+
+export const supabaseIntegration = defineIntegration((supabaseClient: unknown) => {
+  return {
+    ..._supabaseIntegration(supabaseClient),


Can we inline this? I don't fully get the purpose of spreading a function here.

lforst · 2025-04-07T13:46:44Z

packages/core/src/integrations/supabase.ts

+const _supabaseIntegration = (supabaseClient => {
+  // Instrumenting here instead of `setup` or `setupOnce` because we may need to instrument multiple clients.
+  // So we don't want the instrumentation is skipped because the integration is already installed.
+  instrumentSupabase(supabaseClient);


If we potentially need to instrument multiple clients. Would it make sense to either

make the integration also accept an array of clients as args

maybe export the instrumentSupabase() function so that people can actually call Sentry.init() before they instantiate their supabase clients?

lforst · 2025-04-07T13:47:15Z

packages/core/src/integrations/supabase.ts

+
+const instrumentSupabase = (supabaseClientInstance: unknown): void => {
+  if (!supabaseClientInstance) {
+    throw new Error('Supabase client instance is not available.');


I would probably not throw but log here.

lforst · 2025-04-07T13:48:32Z

packages/core/src/integrations/supabase.ts

+  ) => Promise<T>;
+}
+
+const instrumented = new Map();


I would make this a weakmap or actually a WeakSet should be better for this usecase.

lforst · 2025-04-07T13:57:46Z

packages/core/src/integrations/supabase.ts

+          attributes,
+        });
+
+        return (Reflect.apply(target, thisArg, []) as Promise<SupabaseResponse>)


We should always pass the original args. They might be needed in future versions and then we break.

lforst · 2025-04-07T14:42:19Z

packages/core/src/integrations/supabase.ts

+          queryItems.push(translateFiltersIntoMethods(key, value));
+        }
+
+        const body: Record<string, unknown> = {};


Suggested change

const body: Record<string, unknown> = {};

const body: Record<string, unknown> = Object.create(null);

to prevent prototype pollution.

smeubank · 2025-04-09T13:15:30Z

@onurtemizkan do you have an example in team-sdks or something for this? I am just curious what this looks like in product, to also look at for the flutter integration later

Adds support for auth and auth.admin operations

onurtemizkan force-pushed the onur/supabase-integration branch 2 times, most recently from dae5b0f to 80d38ce Compare March 18, 2025 12:54

onurtemizkan changed the title ~~feat(core): Add Supabase Integration~~ feat Mar 18, 2025

onurtemizkan changed the title ~~feat~~ feat: Add Supabase Integration Mar 18, 2025

onurtemizkan force-pushed the onur/supabase-integration branch 5 times, most recently from 7d5968b to 73d5f23 Compare March 20, 2025 12:46

smeubank linked an issue Mar 20, 2025 that may be closed by this pull request

Supabase Support #15436

Open

onurtemizkan force-pushed the onur/supabase-integration branch 5 times, most recently from 927f5ab to aaec090 Compare March 26, 2025 13:18

onurtemizkan marked this pull request as ready for review March 26, 2025 21:27

onurtemizkan force-pushed the onur/supabase-integration branch from dabdf90 to d3a55a1 Compare March 27, 2025 08:57

onurtemizkan marked this pull request as draft March 27, 2025 14:14

onurtemizkan force-pushed the onur/supabase-integration branch from 5dd6723 to 33c2a66 Compare March 27, 2025 19:58

onurtemizkan marked this pull request as ready for review March 28, 2025 10:37

kamilogorek mentioned this pull request Mar 31, 2025

Build for both ESM and CJS supabase-community/sentry-integration-js#19

Closed

onurtemizkan added 6 commits March 31, 2025 11:19

feat(core): Add Supabase Integration

c173a9f

Add missing package exports

efee98d

Remove debug logging

27913a2

Bump next 14 version

51f42a7

Hard-code default development variables

48f197f

Add playwright to dev-dependencies.

5812ac0

onurtemizkan added 20 commits March 31, 2025 11:19

Add supabase to verdaccio config

69dcb3c

Remove unused resolutions and dependencies

9d3f67b

Move supabaseIntegration to @sentry/core

473c9f3

Update import paths

8ad65ab

Fix tests

c9500ec

Fix tests

a8f8411

Fix formatting

207044d

Dedupe dependencies.

73d2cfd

Skip tests on non-tracing bundles

b9b0c37

Deduplicate deps.

4ba5196

Remove test-debug mode

fddc7b1

Try reducing bundle size

cfd40bb

Remove supabaseIntegration from non-Tracing bundles

a9b8501

Bring filter-mappings back.

9d6c259

Export supabase from all tracing bundles

7e7665a

Add vendor license

2a6dddc

Clean up

69e4874

Add auth support

0a2d829

Add auth error capturing

e724a99

Remove signOut from admin operations

Loading
Loading status checks…

d387514

onurtemizkan force-pushed the onur/supabase-integration branch from 1bc2897 to d387514 Compare March 31, 2025 10:26

Clean up

Loading
Loading status checks…

b630367

s1gr1d reviewed Apr 1, 2025

View reviewed changes

onurtemizkan and others added 4 commits April 3, 2025 14:17

Address review comments

28f41f2

Update packages/core/src/integrations/supabase.ts

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.

GPG key ID: B5690EEEBB952194

Verified
Learn about vigilant mode

9755690

Co-authored-by: Sigrid Huemer <[email protected]>

Remove README.md

4b46035

Merge branch 'develop' into onur/supabase-integration

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.

GPG key ID: B5690EEEBB952194

Verified
Learn about vigilant mode

Loading
Loading status checks…

80d558a

s1gr1d requested a review from lforst April 4, 2025 07:38

lforst reviewed Apr 7, 2025

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Add Supabase Integration #15719

feat: Add Supabase Integration #15719

onurtemizkan commented Mar 18, 2025 •

edited

Loading

github-actions bot commented Mar 18, 2025 •

edited

Loading

smeubank commented Mar 28, 2025

onurtemizkan commented Mar 28, 2025

s1gr1d Apr 1, 2025

s1gr1d Apr 1, 2025

s1gr1d Apr 1, 2025

smeubank Apr 1, 2025 •

edited

Loading

s1gr1d Apr 1, 2025

s1gr1d Apr 1, 2025 •

edited

Loading

s1gr1d Apr 1, 2025

s1gr1d Apr 1, 2025

onurtemizkan Apr 3, 2025

lforst left a comment

lforst Apr 7, 2025

lforst Apr 7, 2025

lforst Apr 7, 2025

lforst Apr 7, 2025

lforst Apr 7, 2025

lforst Apr 7, 2025

lforst Apr 7, 2025

smeubank commented Apr 9, 2025


		function instrumentSupabaseAuthClient(supabaseClientInstance: SupabaseClientInstance): void {
		const auth = supabaseClientInstance.auth;

		export const supabaseIntegration = defineIntegration((supabaseClient: unknown) => {
		return {

	const body: Record<string, unknown> = {};
	const body: Record<string, unknown> = Object.create(null);

feat: Add Supabase Integration #15719

Are you sure you want to change the base?

feat: Add Supabase Integration #15719

Conversation

onurtemizkan commented Mar 18, 2025 • edited Loading

github-actions bot commented Mar 18, 2025 • edited Loading

size-limit report 📦

smeubank commented Mar 28, 2025

onurtemizkan commented Mar 28, 2025

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

smeubank Apr 1, 2025 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

s1gr1d Apr 1, 2025 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

lforst left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

smeubank commented Apr 9, 2025

onurtemizkan commented Mar 18, 2025 •

edited

Loading

github-actions bot commented Mar 18, 2025 •

edited

Loading

smeubank Apr 1, 2025 •

edited

Loading

s1gr1d Apr 1, 2025 •

edited

Loading