Function webhookHandler

integrations/supabase/src/management/index.ts:803–865

(event: HandlerEvent<"HTTP">, logger: Logger)

}

async function webhookHandler(event: HandlerEvent<"HTTP">, logger: Logger) {
  logger.debug("[inside supabase management integration] Handling webhook handler");

  const { rawEvent: request, source } = event;

  if (!request.body) {
    logger.debug("[inside supabase management integration] No body found");

    return;
  }

  // Check the Bearer token matches the secret
  const authHeader = request.headers.get("Authorization");

  if (!authHeader) {
    logger.debug("[inside supabase management integration] No Authorization header found");

    return { events: [] };
  }

  const authHeaderParts = authHeader.split(" ");

  if (authHeaderParts.length !== 2) {
    logger.debug(
      "[inside supabase management integration] Authorization header is not in the correct format"
    );

    return { events: [] };
  }

  const token = authHeaderParts[1];

  if (token !== source.secret) {
    logger.debug(
      "[inside supabase management integration] Authorization header does not match the secret"
    );

    return { events: [] };
  }

  const rawBody = await request.text();

  const payload = safeParseBody(rawBody);

  if (!payload) {
    return { events: [] };
  }

  // Generate a unique ID for the event
  const id = randomUUID();

  return {
    events: [
      {
        id,
        name: payload.type,
        source: "supabase",
        payload,