Pricing Blog

Custom claims and supabase update: restricting access to auth

  • building_stuff-1351926592468680817

    Janis

    3 months ago

    Supabase today shared an update whereby "...certain SQL actions you can perform in your database’s auth, storage, and realtime schemas." will be restricted from April 21st onwards.

    I am using custom claims in my app which rely on permissions and it seems like that this permission is affected by it: generate_jwt_with_claims

    @Lucas G Are you still using the custom claims implementation you've shared several months ago? Do you have any tips how to migrate by any chance?
  • lucasg-1351931832421318748

    Lucas G

    3 months ago

    The changes shouldn't affect much as most people likely don't have custom tables in the auth/storage/realtime schemas
  • I moved away from basic claims to a more complex implementation via tables
  • I still have my account and accountUsers tables but now I have permissions as well
  • And required permissions are handled via RLS (you can use database functions in RLS)