New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

refactor(db): security problems #21

Open

4 tasks

furkanunsalan opened this issue Jan 4, 2025 · 0 comments

Assignees

Labels

bug further-version

Contributor

furkanunsalan commented Jan 4, 2025 •

edited

Loading

So the main problem i the ID's and names showing up in the presents section. We need to hide the ID in the client side and the problem is solved!

ID and URL for the presents are shown in client side
All user informations are shown in the client side

Another problem is users shouldn't be able to wee the tables in the db by using their auth tokens. Example link

Add proper security to Supabase settings so that users can't see the tables

Also change the point fetching logic in the scoreboard section so that unnecessary user information is not shown in the response.

furkanunsalan self-assigned this

furkanunsalan added bug further-version labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment