BlogSupabase Auth Webhooks

How to Test Supabase Auth Webhooks

Supabase Auth hooks let you trigger custom HTTP endpoints on signup, login, MFA verification, and password reset events.

Supabase Auth Official Webhook Docs

1. Supabase Auth Webhook Events

Supabase Auth can send the following webhook events to your endpoint:

user.signup
user.login
user.mfa_challenge_verified
user.password_reset
user.delete

2. Set Up a Test Endpoint with HookRay

Follow these steps to start receiving Supabase Auth webhooks for testing:

  1. Go to HookRay and click "Start Testing — Free" to get your unique webhook URL.
  2. Copy the URL (e.g., https://h.hookray.com/abc123).
  3. In your Supabase Auth dashboard, navigate to the webhook settings and paste the HookRay URL as your endpoint.
  4. Select the events you want to receive (see list above).
  5. Trigger a test event — HookRay will show the incoming webhook in real-time.

3. Sample Supabase Auth Webhook Payload

Here's an example of what a Supabase Auth webhook payload looks like:

payload.json
{
  "type": "user.signup",
  "table": "auth.users",
  "record": {
    "id": "uuid-signup-1234",
    "email": "new-user@example.com",
    "created_at": "2026-03-20T19:30:00Z",
    "raw_app_meta_data": {
      "provider": "email"
    }
  },
  "old_record": null
}

4. Common Issues & Troubleshooting

Webhook not arriving?

Check that your endpoint URL is correct and publicly accessible. Supabase Auth cannot reach localhost URLs — use HookRay's cloud URL instead.

Getting 400 or 500 errors?

HookRay accepts any payload and returns 200 OK by default, so the issue is likely on Supabase Auth's side. Check your webhook configuration and event selection.

Need to verify webhook signatures?

Supabase Auth signs webhook requests for security. Use HookRay to capture the raw headers and body, then implement signature verification in your application code.

5. Next Steps

  • Use HookRay's webhook replay feature to re-send captured webhooks while building your handler
  • Enable smart parsing (Pro plan) to see Supabase Auth-specific fields highlighted automatically
  • Check the Supabase Auth webhook documentation for the complete event reference

Ready to test Supabase Auth webhooks?

Get a free webhook URL in 5 seconds. No signup required.

Start Testing Supabase Auth Webhooks — Free