Hi all. Newbie looking for some (very basic) advice.

I've been working with the Lovable.dev AI to develop an app, and have a few minutes ago published the first alpha-ish MVP. Testing it out in the wild, I've found some things that need changing. Going back to Lovable, I get a Supabase error message, which, Lovable tells me "is related to CORS (Cross-Origin Resource Sharing) settings in your Supabase project. When you published the site, the domain changed from your local development server to lovableproject.com, but this new domain isn't allowed to make requests to your Supabase backend.

"To fix this, you need to add your production domain to the allowed origins in your Supabase project settings. Here's what you should do:

"Go to your Supabase project settings Navigate to the API settings section Find the "Additional Allowed Origins" section Add [projectname].lovableproject.com to the list"

The Supabase Help AI tells me the same thing, but I can't find anything remotely like that in the API settings section.

Unfortunately, I can't find any way to find that "Additional Allowed Origins" section. I assume that the section has been changed/moved/renamed or whatever. Can anyone point me in the right direction?

garyaustin•1/16/25, 12:31 AM

I've never heard of any ability to allow or disallow origins.

DevsrealmGuy•1/16/25, 12:35 AM

I haven't either, it is hallucinating

garyaustin•1/16/25, 12:36 AM

It would be sweet, and is the type of thing AI would hallucinate as it would be a good thing.

DevsrealmGuy•1/16/25, 12:39 AM

I just inherited a Loveable project and it's a big mess, A.I is beautiful if you have a bit of an idea on how things works otherwise, it will be a fun ride

garyaustin•1/16/25, 12:40 AM

Yes, I've fed back there will be a huge market for devs that can fix an app that gets successful based on the idea, but was generated by an AI without anyone digging into what it was doing.

DevsrealmGuy•1/16/25, 12:42 AM

Correct

rg5082OP•1/16/25, 12:55 AM

Thanks for the feedback

, curiouser and curiouser.

garyaustin•1/16/25, 12:56 AM

What is the error message exactly and what is the request?

rg5082OP•1/16/25, 1:03 AM

Below was the error message: This is an HTTP server error which means that the server or API you're trying to communicate with is not working properly.

Unfortunately this is not something that the AI can fix for you since we don't control the server that you're trying to communicate with.

Please validate that the url https://[ProjectID].supabase.co/rest/v1/profiles?select=is_admin&id=eq.5d78bc46-4b67-4da2-be36-7e196279ee2c is correct.

HTTP server error

today at 12:22 PM

Failed to fetch

{
"origin": "https://[alphanumeric-code].lovableproject.com",
"method": "GET",
"url": "https://[ProjectID].supabase.co/rest/v1/profiles?select=is_admin&id=eq.5d78bc46-4b67-4da2-be36-7e196279ee2c",
"message": "Failed to fetch",
"stack": "TypeError: Failed to fetch\n at https://cdn.gpteng.co/gptengineer.js:1:1436\n at Generator.next (<anonymous>)\n at https://cdn.gpteng.co/gptengineer.js:1:650\n at new Promise (<anonymous>)\n at R (https://cdn.gpteng.co/gptengineer.js:1:470)\n at window.fetch (https://cdn.gpteng.co/gptengineer.js:1:1386)\n at https://[alphanumeric-code].lovableproject.com/node_modules/.vite/deps/@supabase_supabase-js.js?v=5d1548ab:3865:23\n at https://[alphanumeric-code].lovableproject.com/node_modules/.vite/deps/@supabase_supabase-js.js?v=5d1548ab:3886:12\n at Generator.next (<anonymous>)\n at fulfilled (https://[alphanumeric-code].lovableproject.com/node_modules/.vite/deps/@supabase_supabase-js.js?v=5d1548ab:3838:24)",
"error_type": "http_server_error"
}

rg5082OP•1/16/25, 1:04 AM

The Lovable AI told me: This error is related to CORS (Cross-Origin Resource Sharing) settings in your Supabase project. When you published the site, the domain changed from your local development server to lovableproject.com, but this new domain isn't allowed to make requests to your Supabase backend.

To fix this, you need to add your production domain to the allowed origins in your Supabase project settings. Here's what you should do:

Go to your Supabase project settings
Navigate to the API settings section
Find the "Additional Allowed Origins" section
Add https://[projectid].lovableproject.com to the list
This will affect both your published site and your development environment. The development server should work again once you add the domain to the allowed origins.

After adding the domain, both your development and production environments should work correctly with Supabase.

garyaustin•1/16/25, 1:06 AM

CORs is not mentioned in the error.
Failed to fetch is very generic error and can be on the client/hosting server or in some rare cases from Supabase based on observation.

You could look at the dashboard API Gateway log and see if that profile request is getting to supabase. My guess is no.

garyaustin•1/16/25, 1:08 AM

I don't know anything about what server Lovable is using to host. I think one of Bolt or Lovable uses Netlify.

rg5082OP•1/16/25, 1:09 AM

OK, thanks, @garyaustin, I will investigate further. CORS was suggested by the Supabase AI Assistant, which was also pointing me towards the "Additional Allowed Origins" section.

garyaustin•1/16/25, 1:10 AM

Understand, but there is no such thing, and It is guessing at CORS which is possible, but lots of other things can cause that too.

garyaustin•1/16/25, 1:10 AM

Supabase allows requests from all domains with no ability to control.

rg5082OP•1/16/25, 1:11 AM

OK, thanks again. Lovable is so buggy at the moment, sounds like it's their problem.

DevsrealmGuy•1/16/25, 1:19 AM

As gary suggested, check the logs if any info is logged, it's on the left menu here, on the right side are the example info

rg5082OP•1/16/25, 2:12 AM

Thanks, i will

Hi all. Newbie looking for some (very basic) advice.

Similar Threads

Similar Threads

Similar Threads