cutting N+1 queries in Next.js API routes with Supabase RPC
when a dashboard starts pulling relational data from Supabase, the naive approach is to fire a separate select per row. the result is a classic N+1…
Testing & QA
⚑ Report a ProblemLatest Testing & QA news from Tech News
All topics
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
Wait, How Did Hackers Steal the Encryption Key Too?" 5 Supabase Security Traps I Fixed in Production
Introduction: The Headline That Made My Stomach Drop Almost every week, we see another headline about a major tech company or hot startup suffering…
I asked AI agents to rewrite Supabase in Rust
Let me start with a confession: I don't really know what I'm doing. I'm not a Rust developer. I've never written a database backend. I run a small S…
pg_restore finished fine. One of my tables wasn't there.
A restore test on a real 105-table Supabase database failed a few weeks ago. The tool doing it restores in a strict mode, so it stopped on the first…
We attacked our own AI-agent governance 69 times. Here are the 5 times it gave way.
9 September 2026 · Luc Richelet. Every number below comes from a real execution log, under real PostgreSQL login roles, on two clean databases. Noth…
5 Ways to Download Supabase Storage Files as a ZIP
A "download all" button sounds simple until it has to combine private files, survive a slow connection, and deliver the same export twice. For Supab…
Your Supabase anon key can probably read your whole users table
Here is a Supabase row-level security policy. It was on a profiles table holding names, timezones and weekly availability for real people. create po…
Supabase .NET DevLog #7
Welcome to our weekly log for the Supabase .NET SDK 🎉 Last week, I continued tweaking the quality gate, especially regarding code coverage. I faced…
Running a Monitoring SaaS on Cloudflare Workers + Supabase for Almost Nothing
Originally published on the Merlonix blog . Merlonix monitors uptime, SSL/TLS, DNS, email authentication, blacklists, Certificate Transparency, Core…
Supabase .NET DevLog #6
Welcome to our weekly log for the Supabase .NET SDK 🎉 Following the monorepo migration, I started working towards the new major v8.0.0: Upgraded all…
Test your Supabase RLS before you ship: a free red/green fixture and the 9 SQL checks a linter cannot run
If you built a Supabase app quickly - with an AI coding tool or by hand - the row-level-security policies were often written last, or generated for…
Build vs Buy: What Founders Get Wrong About Templates
Every week a founder DMs me the same question: "Should I build my React Native app from scratch or buy a template?" Here's the framework I use to an…
7 Security Checks Before Shipping an AI-Built Next.js + Supabase App
7 Security Checks Before Shipping an AI-Built Next.js + Supabase App AI coding assistants can dramatically reduce the time between an idea and a wor…
Two errors, one error code, and an hour in the wrong editor : What i learnt building WP-Supabase Sync
If you write to Supabase from anything, sooner or later Postgres hands you SQLSTATE 42501 . It means one of two things: permission denied for table…
Two exploits, one public API key: the day I attacked my own Supabase app
This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry . Every app has its rockstar bug. Mine didn't crash, didn't throw,…
Coverage Before Creativity: The RAG Gate That Keeps My Blog Pipeline Honest
The first failure I had to eliminate in the blog pipeline was not a bad paragraph. It was a bad evidence set. The system was finding a few nearby ch…
Introducing tinbase — local Supabase without Docker (one process, real Postgres)
Supabase local dev = a 12-container, 2.3 GB Docker stack. tinbase serves the same APIs from one 58 MB process . No Docker. It's real Postgres 17 — R…
How to Check Supabase Row Level Security Holes (Free SQL Audit)
Row level security in Supabase fails quietly. There is no crash, no red error banner, nothing in your logs that says "this table is wide open." The…
When `await mutation()` lies: the `{ error }` destructuring that saves your weekend
Episode 2/4 of the mini-series The week Supabase lied to me 4 times . Episode 1 — 3 Supabase security incidents, one shared root cause: SECURITY DEF…
How I Fixed Supabase Storage RLS Errors That the Dashboard UI Couldn't Solve
If you've ever spent hours staring at a 400 error on a Supabase Storage upload despite having RLS policies correctly configured in the dashboard — t…
I Moved My Next.js Dashboard Logic Into Postgres. My Frontend Got Boring (And That's the Point).
My dashboard had a useMemo doing arithmetic it had no business doing. It was a Pokémon TCG Pocket collection tracker, but that part doesn't matter.…
I built an AI that predicts football matches before kickoff — and forces it to stay honest
Most football "tipster" sites have the same trick: they show you the winners and quietly bury the losers. I wanted to build the opposite — an AI tha…
Supabase Shopify Backend: Side-Car Architecture (2026)
For high-volume merchants, relying solely on Shopify metafields to store relational data or custom customer records is an architectural dead end. A…
How I Built Pathway AI: A Full-Stack SaaS Platform in 1 Month
How I Built Pathway AI: A Full-Stack SaaS Platform in 1 Month I built Pathway AI , a SaaS platform for international students planning their study a…
I fuzzed my own Supabase RLS — and found a cross-tenant leak
Row-Level Security is the kind of thing that looks done. The policies are there, the app works, your tests are green. So you move on. The problem is…
Supabase RLS Policy Design Patterns Beyond the Basics
Supabase RLS Policy Design Patterns Beyond the Basics Row Level Security is one of the most powerful features in Supabase — and one of the most misu…
Supabase Authentication & Authorization Patterns
Supabase Authentication & Authorization Patterns Authentication and authorization are the foundation of secure applications. Supabase provides a…
I built an SEO-first internet radio site — and learned why `curl` can't validate audio streams
I recently built Radio Balkan — a single-page web player that puts 750+ Balkan radio stations in one place: no ads, no sign-up, no cookie banners. I…
Next.js + Supabase Performance Optimization: From Slow to Lightning Fast
Next.js + Supabase Performance Optimization: From Slow to Lightning Fast Last month, I optimized a Next.js + Supabase application that was frustrati…
Add Video Processing to Your Vercel + Supabase App in 10 Minutes
Originally published at ffmpeg-micro.com Most Vercel + Supabase apps hit the same wall: a user uploads a video, and you need to do something with it…