SupabaseS
Supabase•4y ago
TARS

Do I need RLS?

Hello,

I've made a simple admin app with next.js and supabase. Because it's an admin app I only have protected routes here. The app uses the magic links guide for auth that is in the next.js starter guide, and it works very well. The problem now is that I only want to have x static set of users being able to get these magic links. Right now anyone can put in their e-mail and they get a magic link and is authed. To the question, do I have to start working on RLS and stuff or can I somehow just choose x set of static users that are allowed to get the magic links and get authed?

This is the _apps.js in next.js. 

function MyApp({ Component, pageProps }) {
  const [session, setSession] = useState(null);

  useEffect(() => {
    setSession(supabase.auth.session());

    supabase.auth.onAuthStateChange((_event, session) => {
      setSession(session);
    });
  }, []);

  return (
    <>
      {!session ? (
        <Login />
      ) : (
        <SideBarProvider>
          <Layout>
            <Component {...pageProps} key={session.user.id} session={session} />
          </Layout>
        </SideBarProvider>
      )}
    </>
  );
}
Was this page helpful?