Back

Chamarti Sreekar

Fcuk imposter syndro... • 2m

You shipped your Supabase app. Everything runs smooth... until it doesn’t. Not because Supabase is broken — But because it’s too easy to use. And that ease hides traps. Here are 6 mistakes that quietly wreck Supabase apps (and how to avoid them): šŸ”’ 1. Trusting auth.user() in the frontend It’s not safe. It’s client-side and spoofable. Use server-side checks with RLS and JWT claims. Always. šŸ”“ 2. Public tables with no RLS Querying is easy, but security is optional. Default to RLS ON, then explicitly open what needs access. 😵 3. No fallback in auth.uid() Policies depending only on auth.uid() fail silently during admin queries. Always account for IS NULL. āš ļø 4. Splitting auth state between client and app Session state in two places = race conditions. Let Supabase handle it. React to onAuthStateChange() once — in one place. 🧩 5. Calling edge functions without auth context Edge functions don’t carry auth by default. Pass the Authorization header manually — no header = no user. šŸ‘» 6. Testing only as a logged-in user Your app works for you. What about anonymous users? Test unauthenticated access too — Supabase doesn’t block anon by default. Supabase is powerful, but that power cuts both ways. Don’t treat it like Firebase. Treat it like backend infra: Secure by default Test like a hacker Trust nothing by default Build fast — but build like it’ll scale. Because one silent failure can kill momentum.

8 Replies
8
15
Replies (8)

More like this

Recommendations from Medial

Image Description
Image Description

Avinash Bhardwaj

Building launch.toda... • 1m

Launch’s Launch Alert šŸš€ Excited to share that Launch is now live. We’ve spent the last few months building something that feels obvious in hindsight: A way to build real, production-ready apps- just by describing what you want. āœ… Real human support

See More
2 Replies
4

Abhishek Dwivedi

 • 

Karyarth • 2m

Customers whisper before they scream. Startups don’t fail from lack of signals. They fail because founders ignore them. Churn creeping up. Engagement slipping. Feedback feels… polite. By the time it’s obvious, it’s too late. The pivot should’ve h

See More
Reply
1

Poosarla Sai Karthik

Tech guy with a busi... • 4m

Sales is treated like a shitty job globally—because it’s rarely treated as a real role. Most startups don’t even have a dedicated sales person. They assume anyone can pick up a phone and sell. Even when they hire, it’s like: ā€œHere’s a guy from the r

See More
Reply
2
Image Description
Image Description

SamCtrlPlusAltMan

 • 

OpenAI • 1m

Have an idea? Blink turns it into a beautiful, fully functional app in seconds..literally. No more boilerplate, debugging marathons, or stitching tools together. Just type what you want, and Blink builds it. šŸ”§ What you get out of the box: – Built-

See More
4 Replies
9
21
Image Description
Image Description

Yash Pratap

csoc.in • 1y

[This post has been deleted by the creator]

7 Replies
5

Mehul Fanawala

 • 

The Clueless Company • 7d

You’ll judge me for this… but I always notice. Whenever I visit an office, a hotel, or even someone’s home, my eyes automatically scan for one thing. A glowing light in an empty room. A fan spinning with no one underneath. An AC humming while the w

See More
Reply
1
Image Description
Image Description

Vishu Bheda

 • 

Medial • 4m

š—§š—µš—² š— š—¼š˜€š˜ š—£š—¼š˜„š—²š—æš—³š˜‚š—¹ š—šš—æš—¼š˜„š˜š—µ š—›š—®š—°š—ø š—•š—¶š—“ š—§š—²š—°š—µ š—Øš˜€š—²š˜€ (š—§š—µš—®š˜ š—”š—¼š—Æš—¼š—±š˜† š—§š—®š—¹š—øš˜€ š—”š—Æš—¼š˜‚š˜) Most people think Big Tech wins because their product is the best. ššØš­ š­š«š®šž. They win because they control ššžšŸ

See More
5 Replies
7
22
Image Description
Image Description

Pulakit Bararia

Building Snippetz la... • 23d

This is a massive leap forward. One of Lovable ’s biggest limitations for me was the buggy Supabase integration and the difficulty of adding native AI features. Unless you relied on messy WebView hacks, building apps with real AI felt almost impossi

See More
8 Replies
7
21
1

Vishnu Dileesh

Engineer | Entrepren... • 18d

Pulse Loop – Indie Dev Log #3 Core screens are done. Auth is wired up with Clerk. Smooth. Now I’m diving into the real stuff—data, logic, systems that don’t just look good, but actually work. Supabase is set up. Tables are live. Relationships mapp

See More
Reply
1

Download the medial app to read full posts, comements and news.