feat: hooks round 5 (Option 1) - add before-user-created hook

internal/api/admin_test.go

@@ -602,7 +602,9 @@ func (ts *AdminTestSuite) TestAdminUserDelete() {
 			require.NoError(ts.T(), json.NewEncoder(&buffer).Encode(c.body))
 			u, err := signupParams.ToUserModel(false /* <- isSSOUser */)
 			require.NoError(ts.T(), err)
-			u, err = ts.API.signupNewUser(ts.API.db, u)
+			signupReq, err := http.NewRequest("GET", "/", nil)
+			require.NoError(ts.T(), err)
+			u, err = ts.API.signupNewUser(signupReq, ts.API.db, u)
 			require.NoError(ts.T(), err)
 
 			// Setup request

internal/api/anonymous.go

@@ -37,7 +37,7 @@ func (a *API) SignupAnonymously(w http.ResponseWriter, r *http.Request) error {
 	var token *AccessTokenResponse
 	err = db.Transaction(func(tx *storage.Connection) error {
 		var terr error
-		newUser, terr = a.signupNewUser(tx, newUser)
+		newUser, terr = a.signupNewUser(r, tx, newUser)
 		if terr != nil {
 			return terr
 		}

internal/api/external.go

@@ -326,7 +326,7 @@ func (a *API) createAccountFromExternalIdentity(tx *storage.Connection, r *http.
 			return nil, terr
 		}
 
-		if user, terr = a.signupNewUser(tx, user); terr != nil {
+		if user, terr = a.signupNewUser(r, tx, user); terr != nil {
 			return nil, terr
 		}
 

internal/api/hooks.go

@@ -0,0 +1,23 @@
+package api
+
+import (
+	"net/http"
+
+	"github.com/supabase/auth/internal/hooks/v0hooks"
+	"github.com/supabase/auth/internal/models"
+	"github.com/supabase/auth/internal/storage"
+)
+
+func (a *API) triggerBeforeUserCreated(
+	r *http.Request,
+	conn *storage.Connection,
+	user *models.User,
+) error {
+	if !a.hooksMgr.Enabled(v0hooks.BeforeUserCreated) {
+		return nil
+	}
+
+	req := v0hooks.NewBeforeUserCreatedInput(r, user)
+	res := new(v0hooks.BeforeUserCreatedOutput)
+	return a.hooksMgr.InvokeHook(conn, r, req, res)
+}

internal/api/invite.go

@@ -59,7 +59,7 @@ func (a *API) Invite(w http.ResponseWriter, r *http.Request) error {
 				return err
 			}
 
-			user, err = a.signupNewUser(tx, user)
+			user, err = a.signupNewUser(r, tx, user)
 			if err != nil {
 				return err
 			}

internal/api/mail.go

@@ -153,7 +153,7 @@ func (a *API) adminGenerateLink(w http.ResponseWriter, r *http.Request) error {
 					return terr
 				}
 
-				user, terr = a.signupNewUser(tx, user)
+				user, terr = a.signupNewUser(r, tx, user)
 				if terr != nil {
 					return terr
 				}
@@ -198,7 +198,7 @@ func (a *API) adminGenerateLink(w http.ResponseWriter, r *http.Request) error {
 				// password here to generate a new user, use
 				// signupUser which is a model generated from
 				// SignupParams above
-				user, terr = a.signupNewUser(tx, signupUser)
+				user, terr = a.signupNewUser(r, tx, signupUser)
 				if terr != nil {
 					return terr
 				}

internal/api/signup.go

@@ -193,7 +193,7 @@ func (a *API) Signup(w http.ResponseWriter, r *http.Request) error {
 			}
 			// do not update the user because we can't be sure of their claimed identity
 		} else {
-			user, terr = a.signupNewUser(tx, signupUser)
+			user, terr = a.signupNewUser(r, tx, signupUser)
 			if terr != nil {
 				return terr
 			}
@@ -363,9 +363,16 @@ func sanitizeUser(u *models.User, params *SignupParams) (*models.User, error) {
 	return u, nil
 }
 
-func (a *API) signupNewUser(conn *storage.Connection, user *models.User) (*models.User, error) {
+func (a *API) signupNewUser(
+	r *http.Request,
+	conn *storage.Connection,
+	user *models.User,
+) (*models.User, error) {
 	config := a.config
 
+	if err := a.triggerBeforeUserCreated(r, conn, user); err != nil {
+		return nil, err
+	}
 	err := conn.Transaction(func(tx *storage.Connection) error {
 		var terr error
 		if terr = tx.Create(user); terr != nil {