I just found out that the rest api keys are findable in the browser: [image] So how should be use rest apis with the key being public? Not only update and insert are a problem even the selects when you deal with sensitive data. In another thread about supabase problems with the plugin (rsl) you …

[image] Help with Supabase RLS policies How do I? Supabase provide two separate keys. One is private, the other one is public. In our supabase plugin we ask for both. The private one allow to connect to your supabase as an administrator (like accessing to the supabase ba…

Critical: How can we use rest apis when the key is public? Or Supabase at all

Ask us anything How do I?

Alexis November 29, 2023, 3:13pm 2

Topic		Replies	Views
Help with Supabase RLS policies How do I? supabase	27	2078	November 29, 2023
Questions: Security, Supabase and WeWeb and.. my app How do I? supabase	7	320	November 15, 2023
WeWeb / Supabase auth issue Ask us anything supabase	12	612	April 30, 2024
Supabase authentication for Row Level Security Ask us anything authentication	3	500	September 27, 2022
Supabase Security when fetching Collection Ask us anything security , supabase	1	240	January 22, 2024

Critical: How can we use rest apis when the key is public? Or Supabase at all

Related topics