Writing · Tag
Articles tagged "api-security".
4 articles on this topic.
Articles tagged "api-security"
·6 min read · security , supabase , auth-jwt
User enumeration via password reset: the bug in default forgot-password flows
Most forgot-password endpoints leak whether an email exists. Fix: return the same response always, regardless of account status.
·7 min read · security , supabase , edge-functions
Origin validation in edge functions: the open redirect you ship by default
Edge functions that trust the Origin or Referer header for redirect URLs are open-redirect vulnerable. One allowlist helper closes the gap.
·7 min read · supabase , supabase-auth , postgres
Two-layer identity models in Supabase: when auth and authorization disagree
auth.users gives you identity for free. Roles need a second table, a trigger, and an atomic migration. Here's where the gap breaks production.
·5 min read · apis , no-code , api-security
Bubble.io Tips - 3
Learn essential Bubble.io privacy and security tips, optimize API calls, and implement best practices to protect your data and improve performance
