內容簡介
Edel Auth for Supabase 外掛將 Supabase 認證整合至 WordPress，提供安全、可擴展的會員系統。此外掛可將「網站管理員」與「一般用戶」完全分開，確保 wp-admin 的安全性，同時為客戶提供無縫的登入體驗。
【主要功能】
• Supabase 認證：支援電子郵件/密碼、魔法連結及社交登入
• 自動同步：Supabase 中的用戶自動同步為 WordPress 訂閱者
• 登出同步：登出 WordPress 自動觸發 Supabase 登出
• 用戶刪除同步：刪除 WordPress 用戶自動移除 Supabase 用戶
• 安全管理員分離：阻止管理員透過前端表單登入
• 智能密碼重設：自動檢測 Google 註冊用戶並引導登入
外掛標籤
開發者團隊
原文外掛簡介
This plugin integrates Supabase Authentication into your WordPress site, providing a secure, scalable, and modern membership system.
It allows you to completely separate “Site Administrators” (who use WordPress native auth) from “General Users” (who use Supabase auth).
This ensures your wp-admin remains secure while offering a seamless login experience for your customers.
Full Setup Guide
We have prepared a comprehensive guide to help you through the process, including Google Cloud Platform configuration and Supabase settings:
Key Features
Supabase Authentication: Support for Email/Password, Magic Links (Passwordless), and Social Login (Google).
Auto Synchronization: Users created in Supabase are automatically synced to WordPress as subscribers upon login.
Logout Synchronization: Logging out of WordPress automatically triggers a sign-out from Supabase to ensure session consistency.
User Deletion Sync: Deleting a user in WordPress automatically removes the corresponding user from Supabase (Requires Service Role Key).
Secure Admin Separation: Administrators are blocked from logging in via the frontend forms to prevent privilege escalation attacks.
Smart Password Reset: Automatically detects if a user registered via Google and guides them to use the “Log in with Google” button instead of sending a reset email.
Welcome Emails: Sends customizable “Welcome” emails directly from WordPress upon successful registration. Custom Sender Name and Email are supported.
Keep Alive (Maintenance): Automatically accesses Supabase once a day to prevent free projects from pausing due to inactivity.
Developer Friendly: Includes hooks for customizing user roles and syncing additional metadata.
Why use this plugin?
Unlike other plugins that sync the entire database, Edel Auth for Supabase authenticates users via the Supabase API on the frontend and only creates a WordPress user session when necessary.
This keeps your WordPress database clean and your site fast.
For Developers
You can customize the plugin behavior using the following hooks in your theme’s functions.php:
Filter Hook: eafs_user_role
This filter allows you to dynamically change the WordPress user role based on the Supabase provider (e.g., assigning a ‘contributor’ role to users who log in via Google).
Action Hook: eafs_after_user_sync
This action triggers after a user is successfully synced from Supabase to WordPress. It is ideal for updating additional user metadata, such as syncing the display name or recording the last login timestamp.
Filter Hook: eafs_is_login_blocked
Receives (bool $blocked, WP_User $user, object $supabase_user). Return true to deny frontend (Supabase) login for that WordPress user. By default only users with the manage_options capability are blocked.
Filter Hook: eafs_check_provider_max_pages
Maximum number of pages (1,000 users per page) scanned when detecting the auth provider for the “Smart Password Reset” feature. Default: 10.
The standard wp_login action is also fired after a successful Supabase login, so login-tracking plugins work as expected.
Shortcodes
[eafs_login] – Displays the login form.
[eafs_register] – Displays the registration form.
[eafs_forgot_password] – Displays the password reset request form.
[eafs_update_password] – Displays the new password entry form (for the reset flow).
[eafs_logout] – Displays a logout button (only visible to logged-in users).
