Next.js Discord

Discord Forum

Next x Supabase

Answered
Pacific sandlance posted this in #help-forum
Open in Discord
Avatar
Pacific sandlanceOP
Do you guys authenticate users to insert content or do you handle everything on the backend with unauthenticated sessions?

I have allowed my tables to be updated, inserted by everyone but I am assuming I am going to face exploitation only if I use the anon key and url in client side right? If I handle everything on the backend like getUsers and do all my queries via the api route am I safe?
Answered by Pacific sandlance
I almost set up myself to failure with this one, will need to authenticate users and go slow
View full answer

1 Reply

Avatar
Pacific sandlanceOP
I almost set up myself to failure with this one, will need to authenticate users and go slow
Answer