feat(plugins): add Clerk plugin to manage users with webhooks

[jeroenptrs]

Purpose

Heavily based on the Stripe plugin, this plugin adds support for Clerk webhooks to insert user data into a table to link users to any data (like Stripe subscriptions, as also apparently this Clerk roadmap item is a Stripe integration)

I've doubted between contributing this as a PR and a userland npm/jsr package, but as there's stripe and slack plugins too, it made sense to include it here. Besides, it also depends on the SQL file support I added in #89 😅

That said, not necessarily needed for discussion here, but the plugin system could potentially be extracted and collected in an awesome-starbase repo?

Tasks

• minor clean up in pnpm lockfile that was causing pnpm install --frozen-lockfile to error
• add clerk plugin that inserts / deletes users / sessions following Clerk events
• add an authenticate function to the plugin that verifies a user session
• fill in reviewer info and show a little demo down below

Verify

• instantiate the Clerk plugin and add it to the plugins in src/index.ts
• create a Clerk instance (development is fine for testing)
• follow their guide on local webhook development using ngrok or deploy the worker
• add a webhook as well as copy over the signing secret you receive to the plugin
• optional grab the instance id from settings and add it as well
• create, modify and delete a user and all changes should persist!

Result

I quickly tested with ngrok because I've been working on setting up these webhooks in a project of mine as well 😅

[Brayden]

Thanks for this contribution. It's been on my list for a while to make a more official integration with Clerk as a plugin so your good intuition worked out here. I'll work on taking a closer look at this and doing some testing on my end hopefully today and be able to report back. Greatly appreciate this PR :)

the plugin system could potentially be extracted and collected in an awesome-starbase repo?

This is something that has been swirling around in my head as well if we need to move them into their own repository, or if it's more desirable that they're available in the core project too. Still haven't solidified the right answer here but nonetheless I like where your head is at here!

[Brayden]

@jeroenptrs Plugin works like a charm, just as described!

Eventually it would be great to bring over session events from Clerk as well and a way to verify session auth tokens are valid by checking with something like the JWKS endpoint in clerk. This could eventually work well with the RLS capabilities we're working on productionizing within Starbase as well.

I know this PR is dependent on #89 as well so will review that PR before approving this one. Great work 👏

[jeroenptrs]

Eventually it would be great to bring over session events from Clerk as well and a way to verify session auth tokens are valid by checking with something like the JWKS endpoint in clerk. This could eventually work well with the RLS capabilities we're working on productionizing within Starbase as well.

Sounds to me like using Clerk's own hono middleware could also fit the bill?

Reading up on verifying in starbase, this should be feasible quite easily and removes the dependency of doing a call to Clerk altogether if users just configure the PEM Public Key instead. Wdyt?

[jeroenptrs]

FYI updated the PR with functionality to verify user sessions inside of the plugin (no external calls to Clerk needed, so this goes pretty swiftly!

[Brayden]

LGTM, thanks for working so hard on getting this over the finish line 🚀

[jeroenptrs]

@Brayden nice, for me it's also ready to merge then!