How to Integrate Lovable with Reddit Ads

Go to www.reddit.com/prefs/apps while logged into your Reddit account. Click 'Create app' or 'Create another app'. Fill in the name (e.g., 'My Lovable Ads Dashboard') and select the application type. For a server-side app that uses client credentials, select 'script'. For an app where end users log in with their own Reddit accounts, select 'web app'. For the redirect URI, enter your deployed Lovable app URL if you will implement user-facing OAuth, or use http://localhost:3000/callback for a script-type app. Click 'Create app'. Reddit displays your application with a client ID (shown below the application name as a short string) and a client secret. Copy both values. For script-type apps, you also need your Reddit account's username and password for the resource owner password credentials flow — but for advertising API access, the standard OAuth2 client credentials or authorization code flow is more appropriate. To access the Reddit Ads API specifically, your developer application needs the ads:edit and ads:read scopes. These are not standard user API scopes — they require that your Reddit account is connected to an active Reddit Ads account. Go to ads.reddit.com and confirm your advertising account is active and funded before attempting API calls. Reddit's Ads API documentation is available at ads-api.reddit.com/docs. The API is versioned with a v3 prefix for most endpoints.

Reddit's Ads API uses OAuth2 with the authorization code flow for user-level access. To generate an access token, direct your browser to Reddit's OAuth authorization URL: https://www.reddit.com/api/v1/authorize?client_id={CLIENT_ID}&response_type=code&state=random_string&redirect_uri={YOUR_REDIRECT_URI}&duration=permanent&scope=ads:read+ads:edit Replace {CLIENT_ID} with your application's client ID and {YOUR_REDIRECT_URI} with the redirect URI you registered. After authorizing, Reddit redirects to your callback URL with a code parameter. Exchange this code for a token by making a POST request to https://www.reddit.com/api/v1/access_token. The permanent duration=permanent parameter generates a refresh token alongside the access token. Store both — the access token is valid for one hour, and the refresh token lets you obtain new access tokens indefinitely. Once you have the access and refresh tokens, store them in Cloud → Secrets in the next step. The Edge Function will handle token refresh automatically using the refresh token when the access token expires.

Open your Lovable project and navigate to Cloud → Secrets via the '+' icon next to the Preview label. Add the following secrets: - Name: REDDIT_ADS_ACCESS_TOKEN — Value: your OAuth2 access token - Name: REDDIT_ADS_REFRESH_TOKEN — Value: your OAuth2 refresh token - Name: REDDIT_ADS_CLIENT_ID — Value: your Reddit application client ID - Name: REDDIT_ADS_CLIENT_SECRET — Value: your Reddit application client secret - Name: REDDIT_ADS_ACCOUNT_ID — Value: your Reddit Ads account ID All five secrets are needed. The access token is used for immediate API calls. The refresh token enables automatic renewal when the access token expires after one hour. The client credentials are used in the refresh flow. The account ID scopes all advertising API calls to your specific ad account. Find your Reddit Ads account ID in the ads.reddit.com dashboard — it appears in the URL as a numeric or alphanumeric string after /accounts/.

Create the Edge Function that proxies Reddit Ads API calls with automatic token refresh. Reddit's Ads API base URL is https://ads-api.reddit.com/api/v3/ and all requests use the Bearer token in the Authorization header. The function includes a token refresh mechanism: if an API call returns 401, the function uses the refresh token to obtain a new access token from https://www.reddit.com/api/v1/access_token and retries the request. For production use, the refreshed token should be stored back to Supabase (since Deno.env secrets cannot be updated at runtime). The function handles three main actions: campaigns (list all campaigns), ad_groups (list ad groups with targeting details), and analytics (fetch performance metrics with optional subreddit breakdowns).

1// supabase/functions/reddit-ads/index.ts
2const REDDIT_ADS_BASE = 'https://ads-api.reddit.com/api/v3';
3const TOKEN_URL = 'https://www.reddit.com/api/v1/access_token';
4
5async function refreshToken(): Promise<string> {
6  const clientId = Deno.env.get('REDDIT_ADS_CLIENT_ID')!;
7  const clientSecret = Deno.env.get('REDDIT_ADS_CLIENT_SECRET')!;
8  const refreshToken = Deno.env.get('REDDIT_ADS_REFRESH_TOKEN')!;
9
10  const credentials = btoa(`${clientId}:${clientSecret}`);
11  const response = await fetch(TOKEN_URL, {
12    method: 'POST',
13    headers: {
14      'Authorization': `Basic ${credentials}`,
15      'Content-Type': 'application/x-www-form-urlencoded',
16      'User-Agent': 'MyLovableApp/1.0',
17    },
18    body: new URLSearchParams({ grant_type: 'refresh_token', refresh_token: refreshToken }),
19  });
20  const data = await response.json();
21  if (!data.access_token) throw new Error('Token refresh failed');
22  return data.access_token;
23}
24
25Deno.serve(async (req) => {
26  if (req.method === 'OPTIONS') {
27    return new Response(null, {
28      headers: {
29        'Access-Control-Allow-Origin': '*',
30        'Access-Control-Allow-Methods': 'POST, OPTIONS',
31        'Access-Control-Allow-Headers': 'Content-Type, Authorization',
32      },
33    });
34  }
35
36  let accessToken = Deno.env.get('REDDIT_ADS_ACCESS_TOKEN')!;
37  const accountId = Deno.env.get('REDDIT_ADS_ACCOUNT_ID')!;
38  const { action, params } = await req.json();
39
40  let url: string;
41  if (action === 'campaigns') {
42    url = `${REDDIT_ADS_BASE}/accounts/${accountId}/campaigns`;
43  } else if (action === 'ad_groups') {
44    url = `${REDDIT_ADS_BASE}/accounts/${accountId}/ad_groups?campaign_id=${params.campaign_id}`;
45  } else if (action === 'analytics') {
46    const q = new URLSearchParams({
47      date_start: params.date_start,
48      date_end: params.date_end,
49      breakdown: params.breakdown || 'none',
50    });
51    url = `${REDDIT_ADS_BASE}/accounts/${accountId}/campaigns/${params.campaign_id}/report?${q}`;
52  } else {
53    return new Response(JSON.stringify({ error: 'Invalid action' }), {
54      status: 400,
55      headers: { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*' },
56    });
57  }
58
59  let response = await fetch(url, {
60    headers: { 'Authorization': `Bearer ${accessToken}`, 'User-Agent': 'MyLovableApp/1.0' },
61  });
62
63  if (response.status === 401) {
64    accessToken = await refreshToken();
65    response = await fetch(url, {
66      headers: { 'Authorization': `Bearer ${accessToken}`, 'User-Agent': 'MyLovableApp/1.0' },
67    });
68  }
69
70  const data = await response.json();
71  return new Response(JSON.stringify(data), {
72    status: response.ok ? 200 : response.status,
73    headers: { 'Content-Type': 'application/json', 'Access-Control-Allow-Origin': '*' },
74  });
75});