Custom claims and supabase update: restricting access to auth

  • building_stuff-1351926592468680817

    Janis

    7 days ago

    Supabase today shared an update whereby "...certain SQL actions you can perform in your database’s auth, storage, and realtime schemas." will be restricted from April 21st onwards.

    I am using custom claims in my app which rely on permissions and it seems like that this permission is affected by it: generate_jwt_with_claims

    @Lucas G Are you still using the custom claims implementation you've shared several months ago? Do you have any tips how to migrate by any chance?
  • lucasg-1351931832421318748

    Lucas G

    7 days ago

    The changes shouldn't affect much as most people likely don't have custom tables in the auth/storage/realtime schemas
  • I moved away from basic claims to a more complex implementation via tables
  • I still have my account and accountUsers tables but now I have permissions as well
  • And required permissions are handled via RLS (you can use database functions in RLS)

Stop scrolling. Start building.

toddle is a visual web app builder that rivals custom code — but accessible to your entire team!

Try toddle — it's free!

© Copyright 2024 toddle. All rights reserved.