The cron job problem.

[Kgitman]

hello, everyone! @GaryAustin1 and team,

I have the edge function where I fetching the data and than storing that data into the supabase. now I want to schedule the edge function like with cron or something so it can be invoke at a prefered time.

I use this format before but I don't want to use now because I'm exponsing the anon key in various oprations and it's neccessary.

select
  cron.schedule(
    'invoke-function-every-minute',
    '* * * * *', -- every minute
    $$
    select
      net.http_post(
          url:='https://project-ref.supabase.co/functions/v1/function-name',
          headers:='{"Content-Type": "application/json", "Authorization": "Bearer YOUR_ANON_KEY"}'::jsonb,
          body:=concat('{"time": "', now(), '"}')::jsonb
      ) as request_id;
    $$
  );

Now I enabled the RLS and selected the service role key to make my table secure and all oprations like insert and update with service_role_key because I'm exposing the anon key!

But I'm not understanding how to run the cron job now?

If I paste here the service_role_key in place of anon_key
"Authorization": "Bearer YOUR_ANON_KEY"

than the cron job also failed may be because I'm passing the anon_key in the edge function.

And if I pass the service role key than the edge function will invoke with both the anon_key and the service_role_key which is also a threat that anyone can invoke the edge function.

so some how I want a secure table as well as cron job!

thanks for time!

please give your suggestions.

I'm trying to solve this for long time.

[GaryAustin1]

Your description does not make much sense.
The function does not care what key you pass it to run. Either anon or service role (or a user jwt) would meet the requirement to have a jwt in the authorization header for the edge function (if that is how you have it set).

Then your edge function sets the createClient as you desire to make calls to Supabase.

You could pass in another header with a secret_key you make up in the cron task and check for that in the edge function. Or you could pass in the service_role key and then check for that in the authorization header to keep anon key from executing the function.

[Kgitman]

getAuthkey() is function which accepting the header from main edge function.

[GaryAustin1]

I have no idea what a main function is in relation to your code.

You should just be able to compare like you want right after the red underline (code from the docs).

[Kgitman]

is it the cron job doc? can you share the link?

[GaryAustin1]

Your cron job if that is the service_role key seems fine.
https://supabase.com/docs/guides/functions/auth

[Kgitman]

thanks @GaryAustin1

do you have any other solution in mind for the below problem?

I just want that my tables are secure as well as my cron job should be also run. and my anon key is exposed in the REST APIs so I don't want to use anon_key for any other operation.

[GaryAustin1]

I already suggested passing a secret header from the cron task with a code it in. Then check that header for the code in the function with rec.headers.get.
But what you want to do is fine, sending the service role key from cron in the authorization header and getting it with rec.headers.get. You must be doing something wrong with the call to the header function to get the header or something else strange is going on.

[Kgitman]

Thank you so much @GaryAustin1 it's working now.

[GaryAustin1]

Can you say what you did to fix it?