---
title: "Supabase Email Hook"
method: POST
path: "/api/auth/email-hook"
tags: ["auth-hooks"]
---

# Supabase Email Hook

`POST /api/auth/email-hook`

## Request

- Base URL: `https://api.pointifytravels.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.pointifytravels.com/api/auth/email-hook`
- Auth: none declared

Receive a Supabase Auth email event and deliver it via Resend.

Raw-body validation is mandatory — Pydantic parses from ``request.json()``
but HMAC needs the exact bytes Supabase signed, so we read ``.body()``
once and parse downstream.

## Headers

- `Webhook-Id` string, nullable
- `Webhook-Signature` string, nullable

## Response `200`

Successful Response

- EmailHookResponse
  - `delivered` boolean, required
  - `provider` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/pointifytravels/apis/pointify-deal-engine.md) · [All operations](https://skmtc.dev/pointifytravels/apis/pointify-deal-engine/llms.txt) · [OpenAPI document](https://skmtc.dev/pointifytravels/apis/pointify-deal-engine/revisions/4350142a4216?raw)