Hello WeWeb team and community, First of all thank you all for the great work developing this tool and providing community Q&A : I’ve been using WeWeb for only a month and I already feel at home :heart: I have a question regarding the security issues related to the Supabase Auth plugin. Is it pos…

@NicolasLatitudes [image] WeWeb & Supabase - Security Concerns Ask us anything [Capture d’écran 2024-02-28 à 17.42.50] Will be released ASAP. Make the service role optional Not possible to see and copy/paste the key What you lose when not provided: Required if you…

Hi @NicolasLatitudes :wave: Right now, it’s not possible to restrict access to plugins to certain contributors in your WeWeb workspace unfortunately. All members of your workspace would be able to view the configuration of plugins, change the config of the Supabase Auth plugin, see the Private API …

Hello Joyce, Thank you for your quick answer ! Sadly the supabase auth integration is one of the major arguments in favor of WeWeb in our technical stack :neutral_face: We wish to handle all security aspects with Row Level Security on the Supabase side, and having a secured knowledge of who’s mak…

Hi, Do you mean removing the toggle to see the private API key in plain text ? It was made possible to easily copy/paste the key from Supabase to Supabase Auth plugin and make you able to check they are the same. I understand your concern, I think it’s doable and it would make sense. But be aware …

Hello Alexis, Thank you very much for taking the time to answer here and on the other post ! I still have a few questions and remarks for you :sweat_smile: About removing the toggle : yes that would be great :+1: I understand that it won’t prevent a sophisticated (or at least tech-informed) att…

About removing the toggle : yes that would be great :+1: I understand that it won’t prevent a sophisticated (or at least tech-informed) attack, but it’s already a great thing to prevent a too easy access to our service_role key ! I agree, I will ask the product team and see if we can make the ch…

Control access to the Supabase Auth Config in editor for my team

Ask us anything

Alexis (Alexis) February 28, 2024, 5:06pm 7

@NicolasLatitudes

Topic		Replies	Views
WeWeb & Supabase - Security Concerns Ask us anything	27	2324	April 5, 2026
Questions: Security, Supabase and WeWeb and.. my app How do I? supabase	7	384	November 15, 2023
⚠️ Supabase configuration update required Announcements	5	199	April 22, 2026
User management Programmatically Ask us anything authentication , supabase	0	73	April 28, 2025
User Roles Supabase Ask us anything authentication , supabase	2	131	October 16, 2025

Control access to the Supabase Auth Config in editor for my team

Related topics