RLS Issues

Hi, I'm using the base auth templete, have a session, but I still get a can't insert RLS error.

I'm using svelte kit's server routes and getting the session based on the JWT passed in the header.

Here's my code: https://paste.hep.gg/horow.typescript
and the error:

Failed to insert waitlist entry for a4c2fc77-e652-4925-9791-a3b428820748: {"code":"42501","details":null,"hint":null,"message":"new row violates row-level security policy for table \"waitlist\""}

Failed to insert waitlist entry for a4c2fc77-e652-4925-9791-a3b428820748: {"code":"42501","details":null,"hint":null,"message":"new row violates row-level security policy for table \"waitlist\""}

Failed to insert waitlist entry for a4c2fc77-e652-4925-9791-a3b428820748: {"code":"42501","details":null,"hint":null,"message":"new row violates row-level security policy for table \"waitlist\""}

Failed to insert waitlist entry for a4c2fc77-e652-4925-9791-a3b428820748: {"code":"42501","details":null,"hint":null,"message":"new row violates row-level security policy for table \"waitlist\""}

And the INSERT policy: https://img.sticks.ovh/JrpLXCIR9 (uses the base one provided by supabase)

Any help would be appricated.

garyaustin•12/17/23, 2:02 PM

You may also need to meet the select policy if you have .select() in your insert call.

Also you could change authenticated to anon in the policy as a test. If it works, then you don't have a user session when you make the call.

Ggaryaustin You may also need to meet the select policy if you have .select() in your insert...

SticksOP•12/17/23, 3:12 PM

Reads for this table are allowed to everyone - https://img.sticks.ovh/1-SNYwInq

With anonanon added to the rule, the query succeeds. To I perhaps need to call .getSession()? instead? I do have the auth JWT from supabase (passed from the cookie) so I do have a session, but the server doesn't seem to seem so.

garyaustin•12/17/23, 3:16 PM

If anon works then when you make the call you do not have a session in the client. It is a very common issue when doing server side calls and first developing the code. Are you using auth-helpers or the new version of it SSR?

Ggaryaustin If anon works then when you make the call you do not have a session in the clien...

SticksOP•12/17/23, 3:17 PM

I'm not for sure. I just called the auth method like I did on the actual frontend side of things. Do you have a docs link I could look at so I can grab a session on the server route?

garyaustin•12/17/23, 3:19 PM

Look in the info under server-side here https://supabase.com/docs/guides/auth
If you are not using auth-helpers there is definitely work you have to do to get a session set up on the server.

Auth | Supabase Docs

Use Supabase to Authenticate and Authorize your users.

SticksOP•12/17/23, 3:19 PM

(reminder - this is svelte server route)

garyaustin•12/17/23, 3:22 PM

https://supabase.com/docs/guides/auth/server-side/creating-a-client?framework=sveltekit#creating-a-client
svelte-kit specific using the new SSR helper.

Creating a Supabase client for SSR | Supabase Docs

Configure Supabase client to use Cookies

Ggaryaustin https://supabase.com/docs/guides/auth/server-side/creating-a-client?framework=sv...

SticksOP•12/17/23, 3:29 PM

It seems like the helper is not ts ready. https://img.sticks.ovh/RaZkWc48S

SticksOP•12/17/23, 3:29 PM

seems to be very upset when I add new locals

garyaustin•12/17/23, 3:43 PM

I don't use server side stuff or typescript so not much help. You may need to start a new topic. I did not see any issues in the repository reported on that.

RLS Issues

Similar Threads

Similar Threads

Similar Threads