Invite team member implementation

[aditodkar]

I want to implement invite team members feature any idea how it can be done using supabase? Basically user should be able to invite team members to his account. Any pointers/suggestions how it can be done?

[silentworks]

I have a project that makes use of the inviteUserByEmail function of Supabase, you could use this to create your team member invitation system. The repo can be found here https:/silentworks/waiting-list

[aditodkar]

I am not saying invite by email id. Actually I want one user who has bought paid application now he can invite at max 5 users to his account to manage things. How can I do that? So basically it is team member login.

[silentworks]

This would be handled the same way, you would use the inviteUserByEmail for the invite mechanism, the rest would be down to that application developer to implement.

[aditodkar]

I have one doubt lets say I have saas application with basic and standard plan. In basic 5 team members can be invited and standard 10 memebers can be invited. If someone is already using product having email: [email protected] then can [email protected] invite user with email [email protected] as a team member?

[GaryAustin1]

For what you are doing, it would probably be better for your team managers to just send a signUp/SignIn link. You would also have some sort of team table that the manager puts his members emails into.

When the user gets signed in you can check the team tables for matches on emails and allow access to those teams, or let them select which team they are currently working on. If the manager deletes an email the user no longer has team access. You could even check with a trigger function on before insert to auth.users table to not allow account creation if the user's email is not on any team.

That is sort of the basic idea, the implementation of a functional multi team system with RLS, team actions allowed, etc. is far more complex.

Edit: and you are correct the invite email will not go out if they are already a signed up user.

[silentworks]

I have one doubt lets say I have saas application with basic and standard plan. In basic 5 team members can be invited and standard 10 memebers can be invited. If someone is already using product having email: [email protected] then can [email protected] invite user with email [email protected] as a team member?

This is a good question, I think at this point you will probably need to create your own invite system along with an external email provider. This would probably require you to use createUser in this case with email auto confirm. https://supabase.com/docs/reference/javascript/auth-api-createuser#auto-confirm-email

Edit: I've had a chat with the team and yes inviteUserByEmail is built to invite users to your app, not so much for multi-tenant apps so that part you will need to implement on your own as we can't create a one size fits all because some teams do multi-tenant using Postgres schemas, others use separate databases and others use a shared database.

[kangmingtay]

Hi everyone, we don't plan on supporting this feature on Supabase Auth for now. Invite systems are highly customisable and each system really depends on how you set up your tenants / organisations. Currently, we only support user invitations from an admin via the supabase.auth.admin.inviteUserByEmail method. This follows the following flow:

1. User enters email on a waitlist
2. Admin invites user using the supabase.auth.admin.inviteUserByEmail command
3. User clicks on invite link and signs into the app

[esmenavav]

I am running into a similar issue. I send an email invitation link, and provide a redirectLink to a custom page to set their password. However, I can't get an authenticated session via the URL so I can't call updateUser to save the password. What is the work around for this?

[ZachooBuilds]

@esmenavav I am more then happy to help as I cracked it in flutter I found that for me my application was adding a '#' in the URL route which meant that when I clicked the invite link the user was not authenticated due to supabase setting session without a #. By removing this and ensuring the URL was just demoapp.com/app instead of demoapp.com/#/app the authentication then worked and I could just set the redirect link to a set password screen and the user could set their password via update user as they were now authenticated.

[esmenavav]

@ZachooBuilds Thank you for the response! I checked the url and don't see a '#' in it. The confirmation URL looks like this: (https://rulpwwdnxlhamigsjnyh.supabase.co/auth/v1/verify?token=d59995d1032a1f44b334a2bb7ff43f3803e5df03cf8423df82e9af15&type=invite&redirect_to=http://localhost:3000/setpassword) Navigating to it does take me to the setpassword page, but then I notice the url changes to: http://localhost:3000/setpassword#error=unauthorized_client&error_code=401&error_description=Email+link+is+invalid+or+has+expired. I know the link hasn't expired because I have clicked it right when I receive it. Calling supabase.auth.getSession() is returning NULL. Was there any other steps you took to get a valid session?

[ZachooBuilds]

@esmenavav Not the URL of the link but the URL of you actual web app. Flutter in its default configuration has hash routing so it adds a hash to all url links however supabase uses path routing so in your redirect to set password it is common that this pages url is actually localhost:3000/#/setpassword which causes supabase to not automatically authenticate and then you cant update the user as they are not authenticated. this link helped me https://docs.flutter.dev/ui/navigation/url-strategies I dont know what architecture you are using but this was the cause of the user not automatically being authenticated once clicking on the link.

[justinianoleo]

Is there any solution in JavaScript to allow users to accept an invitation and log in automatically?