For security reasons I had to implement a "Middleware" as the interceptor of this calls. In this case, my SSR of the project is the only one accessing the database. You can achieve this with nextJs, nuxtJs or sveltekit by only adding the supabase sdk in the server side api endpoints. But you will have to manage JWT by yourself.
Edit: I am speaking in the case that you are referring to domains visible by the end users. Not dashboards or anything like that