Access supabase database from edge function as admin

Question

I'm coming from Firebase Function... Where I can use the Admin Library to access database from the Function bypassing all security rules? On supabase I didn't yet find a way to do that, the documentation is very scarce. Now I'm using this code to access the database from function as the user who requested the function:

const supabaseClient = createClient(
      Deno.env.get("SUPABASE_URL") ?? "",
      Deno.env.get("SUPABASE_ANON_KEY") ?? "",
      { global: { headers: { Authorization: req.headers.get("Authorization")! } } }
    );

But for one of my function, I have to access bypassing all policies, as the function was "admin", and when I remove de third params line in this code (Which was the only vague explanation how to do that I found) I get the error:

AuthApiError: invalid claim: missing sub claim at ...

I also tried change the SUPABASE_ANON_KEY to SUPABASE_SERVICE_ROLE_KEY, same error.

Robina Mirbahar · Accepted Answer · 2023-02-12 06:39:24Z

12

Answer recommended by Google Cloud Collective

Use a service role key to bypass the security rules, make sure you have a valid service key role .

The key you are using Deno.env.get("SUPABASE_ANON_KEY") ?? it has anonymous access and will not bypass security rules.

const supabaseClient = createClient(
Deno.env.get("SUPABASE_URL") ?? "",
Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "",
Deno.env.get("SUPABASE_SERVICE_ROLE_KEY") ?? "",
{ global: { headers: { Authorization: `Bearer ${Deno.env.get("SUPABASE_SERVICE_ROLE_KEY")}` } } });

Replace the "SUPABASE_SERVICE_ROLE_KEY" with value of actual service role key to to bypass security rules.

edited Feb 12, 2023 at 6:39

answered Feb 12, 2023 at 6:02

Robina Mirbahar

7098 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Jan D.M. Dec 16, 2024 at 20:30

This saved me a lot of time! Hope this is the way to go for authenticating Edge functions and bypassing policies

Robina Mirbahar Dec 17, 2024 at 8:12

I'm glad to hear this was helpful for you! 🎉 Yes, this approach is commonly used to authenticate Edge functions effectively while bypassing specific policies when needed. However, it's always important to ensure that bypassing policies aligns with security best practices and doesn't compromise your system's integrity [email protected].

Collectives™ on Stack Overflow

Access supabase database from edge function as admin

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related