PricingBlog

Custom claims and supabase update: restricting access to auth

  • building_stuff-1351926592468680817

    Janis

    11 months ago

    Supabase today shared an update whereby "...certain SQL actions you can perform in your database’s auth, storage, and realtime schemas." will be restricted from April 21st onwards.

    I am using custom claims in my app which rely on permissions and it seems like that this permission is affected by it: generate_jwt_with_claims

    @Lucas G Are you still using the custom claims implementation you've shared several months ago? Do you have any tips how to migrate by any chance?
  • lucasg-1351931832421318748

    Lucas G

    11 months ago

    The changes shouldn't affect much as most people likely don't have custom tables in the auth/storage/realtime schemas
  • I moved away from basic claims to a more complex implementation via tables
  • I still have my account and accountUsers tables but now I have permissions as well
  • And required permissions are handled via RLS (you can use database functions in RLS)