ls ~/writing --tag=security-definer

[01]Writing · Tag

Articles tagged "security-definer".

$ tag --stat security-definer
Articles
3
Published
Mar→Jun 2026
Reading time
22 min
In series
1

Articles tagged security-definer

7 min [supabase][supabase-vault][postgres]

How to encrypt API keys and client secrets in Supabase

Store client secrets in Supabase Vault, keep searchable metadata in Postgres, and gate every decrypt behind one checked SECURITY DEFINER function. Step-by-step SQL with the gotchas.

Supabase Production Hardening 7/8

supabase-vault-encrypt-client-secrets--cover
A leaked backup or one overbroad rule, and your clients’ passwords are plain text.

8 min [postgres][supabase][postgres-triggers]

How to build a tamper-evident audit log in Postgres with one trigger

Build an audit log table, attach a SECURITY DEFINER trigger that captures every UPDATE and DELETE, lock it down with RLS. Forty lines of SQL.

Supabase Production Hardening 3/8

audit-log-postgres-trigger-tutorial--cover
I never made that change.

7 min [supabase][supabase-auth][postgres]

Two-layer identity models in Supabase: when auth and authorization disagree

Supabase Auth creates identities, not roles. Use a user_roles table, RLS policies, and one trigger migration so signups never strand users without permissions.

Supabase Production Hardening 1/8

two-layer-identity-models-supabase--cover
The user did something weird.

[02]Narrow it down

[03]Read in order

One series runs through this tag.

All articles