v16.0

Notifuse/notifusev16.0Nov 5, 2025by pierre-b

AI Summary

Notifuse v16.0 introduces Supabase integration with two powerful hooks for authentication emails and user sync, adds AES-256-GCM encryption for sensitive template data in message history, and protects integration-managed templates from accidental deletion.

Key Highlights

New Supabase Integration with Auth Email Hook for sending branded authentication emails (signup, magic link, password recovery, etc.)
New Before User Created Hook for automatically syncing Supabase users to Notifuse contacts
Message Data Encryption using AES-256-GCM for sensitive template variables at rest
Integration-Managed Resources protection preventing deletion of templates created by integrations
New `integration_id` column added to `transactional_notifications` and `templates` tables

New Features

Supabase Auth Email Hook - Send branded authentication emails for all Supabase auth events with auto-generated MJML templates and HMAC-SHA256 verification
Supabase Before User Created Hook - Automatically sync new users to Notifuse contacts with configurable field mapping and list subscription
Message Data Encryption - AES-256-GCM encryption for template data variables in message history, backward compatible with existing data
Integration-Managed Resources - Templates and notifications created by integrations are protected from deletion but remain fully editable
HMAC-SHA256 webhook signature verification for Supabase integration security
Encrypted webhook keys stored at rest using AES-256

Full Release Notes

# Notifuse v16.0 Release Notes

**Release Date:** November 5, 2025

## 🎉 What's New

### 🔗 Supabase Integration

<img src="https://storage.googleapis.com/readonlydemo/supabase-notifuse.png" alt="Supabase + Notifuse Integration" width="200" />

Seamlessly connect Supabase Auth with Notifuse to send branded authentication emails and automatically sync users to your contact database.

**Two Powerful Hooks:**

#### 1. Auth Email Hook

Send professional, on-brand authentication emails for all Supabase auth events:

- User signup confirmations
- Magic link authentication
- Password recovery
- Email change verification
- Reauthentication requests

**Features:**

- Auto-generated MJML templates for all auth event types
- Full template customization while preserving required Liquid variables
- HMAC-SHA256 webhook signature verification for security
- Pre-configured with proper Supabase URL formats

#### 2. Before User Created Hook

Automatically sync new Supabase users to your Notifuse contacts:

- Maps Supabase user fields to Notifuse contact fields
- Optional automatic list subscription
- Configurable custom JSON field mapping for `user_metadata`
- Disposable email rejection option
- Lenient error handling - Notifuse issues never block user signups

**Security:**

- HMAC-SHA256 webhook signature verification
- Encrypted webhook keys stored at rest (AES-256)
- Invalid signatures are rejected automatically

**Getting Started:**

1. Navigate to **Settings** → **Integrations** → **Add Integration** → **Supabase**
2. Configure webhook secrets from your Supabase dashboard
3. Customize the auto-generated templates to match your brand
4. Test with a signup flow

📖 [Full Integration Guide](/docs/integrations/supabase.mdx)

### 🔐 Message Data Encryption

Your sensitive data is now even more secure. Template data variables in message history are automatically encrypted at rest using AES-256-GCM encryption.

**Key Benefits:**

- Protects sensitive information like API keys, tokens, and personal data in template variables
- Automatic encryption on message creation and decryption on retrieval
- Backward compatible - existing unencrypted messages continue to work
- No performance impact on queries (metadata remains unencrypted)

**Technical Details:**

- Uses workspace secret key for encryption
- Only applies to new messages (no migration of existing data required)
- Message metadata remains unencrypted for optimal query performance

### 🛡️ Integration-Managed Resources

Templates and transactional notifications created by integrations (like Supabase) are now protected from accidental deletion:

- Cannot be deleted through the UI or API
- Can still be fully edited and customized
- Ensures critical integration workflows remain intact

## 🗄️ Database Schema Changes

**New Column:** `integration_id`

- Added to `transactional_notifications` table
- Added to `templates` table
- Tracks which integration manages each resource
- Enables protection against accidental deletion

## 📚 Documentation

- [Supabase Integration Guide](/docs/integrations/supabase.mdx)
- [Integration Management](/docs/concepts/integrations.mdx)
- [Full Changelog](/CHANGELOG.md)

## 🙏 Feedback

We'd love to hear your feedback on v16.0!

- Report issues: [GitHub Issues](https://github.com/notifuse/notifuse/issues)
- Email us: hello@notifuse.com

Stay tuned for more updates!

---

**Full Changelog:** [v15.0...v16.0](CHANGELOG.md)

**Docker Image:** `notifuse/notifuse:v16.0`