18
Realtime Channel Authentication
Source: supabase/supabase#10706 · opened by @peterkogo
Update: [Realtime Channel Authentication is in progress](
---
Right now it is possible to listen and broadcast to any realtime channel (apart from Postgres CDC) without authentication. This invites malicious intent and is insecure.
This makes it impossible to use supabase for any non-public applications which are based on private workspaces.
Relevant discussion: #8162
---
Right now it is possible to listen and broadcast to any realtime channel (apart from Postgres CDC) without authentication. This invites malicious intent and is insecure.
This makes it impossible to use supabase for any non-public applications which are based on private workspaces.
Relevant discussion: #8162
No pledges yet. Be the first to back this.
Comments
Similar requests
Make Changes to the DB through a Realtime extension
2 votes · 0 comments
Individual NPM packages for supabase-js modules?
2 votes · 0 comments
Realtime Client can subscribe multiple times to same channel
5 votes · 0 comments
Realtime channel initial value on channel creation
3 votes · 0 comments
Why do I need to do manual refresh of the realtime token?
1 vote · 0 comments
No comments yet.