Secure Supabase query with Buildship
Hi,
I'm developing an application with FlutterFlow and a Firebase / Supabase backend.
You're going to ask me why I'm using both backends? Because I want to access certain Firebase features that are not easily integrated with Supabase, so I authenticate on Firebase and I use the uid of my user table to make the link with my objects that are stored on Supabase.
The problem with this setup is that I lose all the advantage of RLS...
I wanted to know if I could use Buildship to secure my calls between Flutterflow and supabase? If so, do you have any idea how I could do this?
Thanks for your help
7 Replies
Hey @mamad7319 👋 great to have you here. Check out this video, it details how you can achieve this by securing your Supabase workflows with BuildShip https://www.youtube.com/watch?v=uhc8732Dpq4
The Digital Pro's NoCode Academy
YouTube
#BuildShip + #FlutterFlow - Create a secure #Supabase Workflow!
#BuildShip is a lowcode visual backend builder that lets you ship APIs, scheduled jobs, backend cloud functions instantly. Powered by AI, create your own workflow nodes, connect to any tool, database and create scalable backend for your apps.
In this video I walk you through creating a workflow which is based on a scenario presented within a #F...
oh thank you @harini i'm checking that !
Hi @harini I looked at this video but I have not found answers I need for my use case , as i say I’m not using supabase as auth provider but firebase so I cannot use RLS and generate access token…
Did you find a solution for this? I have a similar scenario (using FB for authentication) and was planning to move away from FB to SB for data storage etc. and BS as Backend.
cc @thedigitalpro who might have some ideas to share
So technically you are saying that you would like to link two identity providers securely when indeed they operate independently? BuildShip can be the middleman in these requests but I fear one may become less secure than the other. Would your Supabase tables be accessible within your public facing FlutterFlow application? I.e would it only be BuildShip that would be accessing your Supabase table(s) directly?
Hi @thedigitalpro , I was thinking about using Buildship as middleman and begin all my buildship workflow with a firebase authentication action then before having access to mysupabase backend in the workflow
So in FlutterFlow I will use buildship endpoint with JWT token ( generated with firebase auth ) as key in my json body