Supabase service-role key exposed in the browser
The service-role key skips every Row Level Security rule. Used in browser code, it's handed to every visitor, who can then read, change or delete your whole database. What you see Code that runs in the browser creates a Supabase client with SUPABASE_SERVICE_ROLE_KEY (or a key whose role is service_…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-04 09:40 · DEV Community — AI
Supabase service-role key exposed in the browser