Weeknight.
start free

App Building

Prove your RLS actually protects data

The step everyone skips: a two-account test that SHOULD fail to read another user's rows, so you know the lock holds instead of hoping it does.

#supabase#rls#security#testing#verification

Members-only content

The full prompt unlocks with Membership.

Founding rate is $29/mo, locked forever for the first 100 members. You get this prompt, the rest of the 73-prompt library, every new drop we ship, plus every one-time product folded in.

See Membership →← Back to Library
→More from App Building

Pair this with another prompt from the same shelf.

App Building

Design a database schema with security built in

Describe what your app stores; get tables, an owner column, and Row-Level Security turned on from the first migration, not bolted on after you've leaked data.

View →
App Building

Write or fix your Row-Level Security policies

Paste your tables; get correct per-action RLS policies: the thing that actually stops one user from reading another user's rows.

View →
App Building

Wire up passwordless (magic-link) auth

Add email magic-link sign-in/out to a Next.js + Supabase app, using the correct server/client split so sessions actually persist across refreshes.

View →
App Building

Set up environment variables and secrets safely

The .env.local + .gitignore + host setup that keeps you from leaking an API key on day one, plus the recovery move if you already did.

View →