cli icon indicating copy to clipboard operation
cli copied to clipboard

Allow running supabase with SSL enabled (accessible via HTTPS)

Open jovobe opened this issue 2 years ago • 3 comments

Is your feature request related to a problem? Please describe. I'm currently implementing the Login with Apple functionality. Sadly, I'm unable to test my implementation locally because Apple forces you to provide an HTTPS URL as a return URL. Because supabase runs locally without SSL, this callback URL looks like this: http://localhost:54321/auth/v1/callback.

Describe the solution you'd like It would be very nice no either have a switch in the config.toml to enable SSL or just to serve the /auth endpoints via two separate ports, one with SSL enabled and one without. E.g. https://localhost:54329/auth/v1/callback

Describe alternatives you've considered A workaround I'm going to implement now is to serve a reverse proxy (e.g. traefik) locally that just translates a local HTTPS endpoint to the given HTTP one.

Additional context This is how the Apple config dialog looks like: Screenshot 2023-09-14 at 3 59 16 PM

jovobe avatar Sep 14 '23 06:09 jovobe

I'd also appreciate this functionality for my use case:

Is your feature request related to a problem? Please describe. I want to use supabase cli to test my web app locally, and with devices on my local network. My app needs to be served via https to enable access to the camera media stream.

Describe the solution you'd like Switch in config to enable SSL, or additionally enabling auth via https by default

Describe alternatives you've considered This can be mitigated by enabling camera access over http in the browser of the device I am testing (eg via chrome://flags/#unsafely-treat-insecure-origin-as-secure)

grddavies avatar Oct 30 '23 10:10 grddavies

Trying to implement Apple OAuth locally too. Need HTTPS for local supabase.,

mlawlerau avatar Apr 27 '24 05:04 mlawlerau

Same issue with developing Slack apps 😕 ngrok to the rescue for now

Screenshot 2024-07-01 at 23 55 31

andreasvirkus avatar Jul 01 '24 20:07 andreasvirkus

@sweatybridge from what I can see this is now supported via:

[api.tls]
enabled=true

Is that correct?

TheCodeDestroyer avatar Aug 09 '24 16:08 TheCodeDestroyer

Yes, that's correct.

sweatybridge avatar Aug 09 '24 16:08 sweatybridge