Can't access Vault secrets from Edge Functions without making them publicly accessible

Hi there!

I'm trying to make it so that decrypted secrets in Supabase Vault are available from Edge Functions (acting as the 'service_role' role) but not to users.

I've tried creating a database function, which works except that security definer makes it publicly accessible and security invoker makes it not even accessible to the service_role user in the backend.

I've tries creating a view, but this isn't accessible to any users (even service_role) and Supabase doesn't let me edit RLS on either the vault or the view.

Where am I going wrong here? Thanks!
Was this page helpful?