3
Block Domains from getting access to my Database
Source: supabase/supabase#13768 · opened by @jonxssc
Feature request
Is your feature request related to a problem? Please describe.
Yes. Anyone can go into my code, copy the Database Key and display all my public data on his website. I cant easily stop that because i have much public data, that is not posted from users and is mostly accessed by not registered users so i cant activate RLS and only let it access by Users.
Describe the solution you'd like
A simple textbox where i can write all my domains, that are allowed to get access to my database and all other domains that are trying to get access are simply blocked.
Describe alternatives you've considered
A very time consuming and bad Solution, but for now it works is to create for every Table a Police and activate RLS.
In the police you need to write the following Code. After that only this one Domain has access to the Tables Data.
(((current_setting('request.headers'::text, true))::json ->> 'referer'::text) = '
Is your feature request related to a problem? Please describe.
Yes. Anyone can go into my code, copy the Database Key and display all my public data on his website. I cant easily stop that because i have much public data, that is not posted from users and is mostly accessed by not registered users so i cant activate RLS and only let it access by Users.
Describe the solution you'd like
A simple textbox where i can write all my domains, that are allowed to get access to my database and all other domains that are trying to get access are simply blocked.
Describe alternatives you've considered
A very time consuming and bad Solution, but for now it works is to create for every Table a Police and activate RLS.
In the police you need to write the following Code. After that only this one Domain has access to the Tables Data.
(((current_setting('request.headers'::text, true))::json ->> 'referer'::text) = '
No pledges yet. Be the first to back this.
Comments
Similar requests
Support load balancer geo-routing with custom domains
7 votes · 0 comments
Multi-Tenant Domains
6 votes · 0 comments
Authenticated API Endpoint to Restart / Toggle Database On & Off Remotely
2 votes · 0 comments
Allow direct access to database from edge functions
1 vote · 0 comments
PAT security vulnerability for MCP - prod access
2 votes · 0 comments
No comments yet.