How is the Supabase Private Key stored?

[Paul27]

Hi,

Could you explain how WeWeb handles and stores the Supabase Private API Key?

Saw this in the docs and wanted to discuss a bit more:

Thanks

[Broberto (Rob)]

I think it’s stored on WeWeb’s servers. It’s mostly for introspection of the schema. It should not be bundled with your app.

[Paul27]

Hey, thanks for the answer. Found a rather good thread on the topic:

WeWeb & Supabase - Security Concerns

Hi everyone and the WeWeb team! I am writing because both we and our customers have security concerns regarding the WeWeb platform. First, we absolutely love WeWeb and enjoy building apps with it a great deal! However, one major concern we have is that WeWeb does not provide specific details on how our API tokens are stored and secured within their infrastructure. We use Supabase, and to utilize the Supabase Auth Plugin, we need to store the service_role key in WeWeb. This key grants access to…