SignIn with OAuth? #7

gaetandezeiraud · 2024-05-02T19:13:43Z

gaetandezeiraud
May 2, 2024

How to SignIn with OAuth providers? Like Google, Facebook, etc...
I tried on my side, but doesn't found a solution to a problem, Supabase return the access_token in the fragment part of the URL... So I can't get it with a HttpListener for example.

Here the code (not a clean code):

using com.example;
using System;
using System.Threading.Tasks;
using Supabase.Gotrue;
using Supabase.Gotrue.Exceptions;
using TMPro;
using UnityEngine;
using static Supabase.Gotrue.Constants;
using System.Net;

public class SignInWithGoogle : MonoBehaviour
{
    [SerializeField] private string redirectUrl = "http://localhost:3000/";
    private string pkce;

    // Public Unity References
    public TMP_Text ErrorText = null!;
    public SupabaseManager SupabaseManager = null!;

    // Private implementation
    private bool _doSignIn;
    private bool _doSignOut;

    // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
    public void SignIn()
    {
        _doSignIn = true;
    }

    // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
    public void SignOut()
    {
        _doSignOut = true;
    }

    private async void Update()
    {
        // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
        if (_doSignOut)
        {
            _doSignOut = false;
            await SupabaseManager.Supabase()!.Auth.SignOut();
            _doSignOut = false;
        }

        // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
        if (_doSignIn)
        {
            _doSignIn = false;
            await PerformSignIn();
            _doSignIn = false;
        }
    }

    private void StartLocalWebserver()
    {
        HttpListener httpListener = new HttpListener();

        httpListener.Prefixes.Add("http://*:3000/");
        //httpListener.Prefixes.Add("http://127.0.0.1:3000/");
        //httpListener.AuthenticationSchemes = AuthenticationSchemes.Anonymous;
        httpListener.Start();
        httpListener.BeginGetContext(new AsyncCallback(IncomingHttpRequest), httpListener);
    }

    private async void IncomingHttpRequest(IAsyncResult result)
    {
        Debug.Log("IncomingHttpRequest");

        HttpListener httpListener;
        HttpListenerContext httpContext;
        HttpListenerRequest httpRequest;
        HttpListenerResponse httpResponse;
        string responseString;

        // get back the reference to our http listener
        httpListener = (HttpListener)result.AsyncState;

        // fetch the context object
        httpContext = httpListener.EndGetContext(result);

        // the context object has the request object for us, that holds details about the incoming request
        httpRequest = httpContext.Request;

        var token = httpRequest.QueryString.Get("access_token");
        // string accessToken = Regex.Match(responseBody, @"access_token=([^#]+)").Groups[1].Value;
        Debug.Log("=====> " + httpRequest.Url.Fragment);

        // build a response to send an "ok" back to the browser for the user to see
        httpResponse = httpContext.Response;
        responseString = "<html><body><b>DONE!</b><br>(You can close this tab/window now)</body></html>";
        byte[] buffer = System.Text.Encoding.UTF8.GetBytes(responseString);

        // send the output to the client browser
        httpResponse.ContentLength64 = buffer.Length;
        System.IO.Stream output = httpResponse.OutputStream;
        output.Write(buffer, 0, buffer.Length);
        output.Close();


        try
        {
            Debug.Log("pkce: " + pkce);
            Debug.Log("Token: " + token);

            Session session = (await SupabaseManager.Supabase()!.Auth.ExchangeCodeForSession(pkce, token)!);
            ErrorText.text = $"Success! Signed Up as {session.User?.Email}";
        }
        catch (GotrueException goTrueException)
        {
            ErrorText.text = $"{goTrueException.Reason} {goTrueException.Message}";
            Debug.Log(goTrueException.Message, gameObject);
            Debug.LogException(goTrueException, gameObject);
        }
        catch (Exception e)
        {
            Debug.Log(e.Message, gameObject);
            Debug.Log(e, gameObject);
        }

        httpListener.Stop();
    }

    // This is where we do the async work and handle exceptions
    private async Task PerformSignIn()
    {
        try
        {
            var providerAuth = (await SupabaseManager.Supabase()!.Auth.SignIn(Provider.Google))!;
            var signInUrl = providerAuth.Uri.ToString();
            pkce = providerAuth.PKCEVerifier;

            Debug.Log("Destination host: " + signInUrl);

            StartLocalWebserver();
            Application.OpenURL(signInUrl);
        }
        catch (GotrueException goTrueException)
        {
            ErrorText.text = $"{goTrueException.Reason} {goTrueException.Message}";
            Debug.Log(goTrueException.Message, gameObject);
            Debug.LogException(goTrueException, gameObject);
        }
        catch (Exception e)
        {
            Debug.Log(e.Message, gameObject);
            Debug.Log(e, gameObject);
        }
    }
}

And so, token is empty, also Debug.Log("=====> " + httpRequest.Url.Fragment);.
Any idea?

Answered by gaetandezeiraud

May 3, 2024

Good news, here a working example :

using com.example;
using System;
using System.Threading.Tasks;
using Supabase.Gotrue;
using Supabase.Gotrue.Exceptions;
using TMPro;
using UnityEngine;
using static Supabase.Gotrue.Constants;
using System.Net;

public class SignInWithGoogle : MonoBehaviour
{
    [SerializeField] private string RedirectUrl = "http://*:3000/";

    // Public Unity References
    public TMP_Text ErrorText = null!;
    public SupabaseManager SupabaseManager = null!;

    // Private implementation
    private bool _doSignIn;
    private bool _doSignOut;
    private bool _doExchangeCode;

    private HttpListener httpListener = null;

    // Transactional data
    private string

View full answer

wiverson · 2024-05-02T22:29:49Z

wiverson
May 2, 2024
Maintainer

I touched on this in the discussion over at supabase-community/supabase-csharp#154

FWIW the Supabase C# library can be used with stuff like ASP.NET where you have a full web server flow that plays nicely with the web browser land stuff. Using the C# lib with Unity (and any other non-browser desktop app) will have similar issues. It's possible to build the flow but it's more complicated (kind of how I describe in the discussion).

1 reply

gaetandezeiraud May 3, 2024
Author

Thank you for the answer. I'm a little disappointed because I was so close with my code. "Just" this token thing in the url Fragment. Which doesn't allow me to get it back.

gaetandezeiraud · 2024-05-03T05:16:59Z

gaetandezeiraud
May 3, 2024
Author

I saw here than the PKCE "fix" this problem, of the token in the fragment supabase-community/supabase-csharp#111 (comment)

I give it a try. If it works, I share the solution here. If not, I think I give up and go with another auth system.

1 reply

gaetandezeiraud May 3, 2024
Author

Good news, here a working example :

using com.example;
using System;
using System.Threading.Tasks;
using Supabase.Gotrue;
using Supabase.Gotrue.Exceptions;
using TMPro;
using UnityEngine;
using static Supabase.Gotrue.Constants;
using System.Net;

public class SignInWithGoogle : MonoBehaviour
{
    [SerializeField] private string RedirectUrl = "http://*:3000/";

    // Public Unity References
    public TMP_Text ErrorText = null!;
    public SupabaseManager SupabaseManager = null!;

    // Private implementation
    private bool _doSignIn;
    private bool _doSignOut;
    private bool _doExchangeCode;

    private HttpListener httpListener = null;

    // Transactional data
    private string _pkce;
    private string _token;

    // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
    public void SignIn()
    {
        _doSignIn = true;
    }

    // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
    public void SignOut()
    {
        _doSignOut = true;
    }

    private async void Update()
    {
        // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
        if (_doSignOut)
        {
            _doSignOut = false;
            await SupabaseManager.Supabase()!.Auth.SignOut();
            _doSignOut = false;
        }

        if (_doExchangeCode)
        {
            _doExchangeCode = false;
            await PerformExchangeCode();
            _doExchangeCode = false;
        }

        // Unity does not allow async UI events, so we set a flag and use Update() to do the async work
        if (_doSignIn)
        {
            _doSignIn = false;
            await PerformSignIn();
            _doSignIn = false;
        }
    }

    private void StartLocalWebserver()
    {
        if (httpListener == null)
        {
            HttpListener httpListener = new HttpListener();

            httpListener.Prefixes.Add(RedirectUrl);
            httpListener.Start();
            httpListener.BeginGetContext(new AsyncCallback(IncomingHttpRequest), httpListener);
        }
    }

    private void IncomingHttpRequest(IAsyncResult result)
    {
        Debug.Log("IncomingHttpRequest");

        HttpListener httpListener;
        HttpListenerContext httpContext;
        HttpListenerRequest httpRequest;
        HttpListenerResponse httpResponse;
        string responseString;

        // Get back the reference to our http listener
        httpListener = (HttpListener)result.AsyncState;

        // Fetch the context object
        httpContext = httpListener.EndGetContext(result);

        // The context object has the request object for us, that holds details about the incoming request
        httpRequest = httpContext.Request;

        _token = httpRequest.QueryString.Get("code");

        // Build a response to send an "ok" back to the browser for the user to see
        httpResponse = httpContext.Response;
        responseString = "<html><body><b>DONE!</b><br>(You can close this tab/window now)</body></html>";
        byte[] buffer = System.Text.Encoding.UTF8.GetBytes(responseString);

        // Send the output to the client browser
        httpResponse.ContentLength64 = buffer.Length;
        System.IO.Stream output = httpResponse.OutputStream;
        output.Write(buffer, 0, buffer.Length);
        output.Close();

        httpListener.Stop();
        httpListener = null;
        _doExchangeCode = true;
    }

    private async Task PerformSignIn()
    {
        try
        {
            var providerAuth = (await SupabaseManager.Supabase()!.Auth.SignIn(Provider.Google, new SignInOptions
            {
                FlowType = OAuthFlowType.PKCE,
            }))!;
            _pkce = providerAuth.PKCEVerifier;

            StartLocalWebserver();
            Application.OpenURL(providerAuth.Uri.ToString());
        }
        catch (GotrueException goTrueException)
        {
            ErrorText.text = $"{goTrueException.Reason} {goTrueException.Message}";
            Debug.Log(goTrueException.Message, gameObject);
            Debug.LogException(goTrueException, gameObject);
        }
        catch (Exception e)
        {
            Debug.Log(e.Message, gameObject);
            Debug.Log(e, gameObject);
        }
    }

    private async Task PerformExchangeCode()
    {
        try
        {
            Session session = (await SupabaseManager.Supabase()!.Auth.ExchangeCodeForSession(_pkce, _token)!);
            ErrorText.text = $"Success! Signed Up as {session.User?.Email}";
        }
        catch (GotrueException goTrueException)
        {
            Debug.Log("GotrueException");
            ErrorText.text = $"{goTrueException.Reason} {goTrueException.Message}";
            Debug.Log(goTrueException.Message, gameObject);
            Debug.LogException(goTrueException, gameObject);
        }
        catch (Exception e)
        {
            Debug.Log(e.Message, gameObject);
            Debug.Log(e, gameObject);
        }
    }
}

Be warned, it's not so powerfull than the solution of @wiverson because we open the default browser and not a webview (so it is not inside the game, but the need to switch between application). But it is good enough for the moment.

I can confirm it is working on Windows, MacOS and Android.

Answer selected by gaetandezeiraud

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

SignIn with OAuth? #7

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 2 comments 2 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

SignIn with OAuth? #7

Uh oh!

Uh oh!

gaetandezeiraud May 2, 2024

Replies: 2 comments · 2 replies

Uh oh!

wiverson May 2, 2024 Maintainer

Uh oh!

gaetandezeiraud May 3, 2024 Author

Uh oh!

gaetandezeiraud May 3, 2024 Author

Uh oh!

gaetandezeiraud May 3, 2024 Author

gaetandezeiraud
May 2, 2024

Replies: 2 comments 2 replies

wiverson
May 2, 2024
Maintainer

gaetandezeiraud May 3, 2024
Author

gaetandezeiraud
May 3, 2024
Author

gaetandezeiraud May 3, 2024
Author