if my endpoint

import supabase from '$lib/db';

export const get = async () => {
    try {
        const { data: events, error } = await supabase.from('event').select('*');

        if (error) throw error;

        return {
            body: {
                events
            }
        };
    } catch (e) {
        console.log({ e });
    }
};

and i call it like this

{#if events}
    {#each events as profile}
        <div class="flex space-x-10 ">
            <div>{profile.name}</div>
            <div>{profile.is_draft}</div>
            <div>{profile.organiser}</div>
            <div>{profile.user_id}</div>
        </div>
    {/each}
{/if}

that only works if rsl is off

this works with rsl if im using the store

export const eventStore = (() => {
    const { subscribe, update, set } = writable({
        allTask: []
    });

    return {
        subscribe,
        update,
        set,

        get: async () => {
            try {
                let { data, error } = await supabase.from('event').select('*');

                update((state) => {
                    state.allTask = data;
                    return state;
                });

                // update((state) => (state = { ...state, allTask: data })); //this is another way of writing it
                if (error) throw error;
            } catch (e) {
                console.log(e.message);
            } finally {
                console.log('hey');
            }
        }
    };
})();

and i call it like this

{#await eventStore.get() then re}
    {#each $eventStore.allTask as event}
        <div class="mt-10">{event.name}</div>
    {/each}
{/await}

the authstate has a flicker of undefined and then it registers the user so im not sure if that has something to play with it

export const user = readable(null, (set) => {
    set(supabase.auth.user());
    const unsubscribe = supabase.auth.onAuthStateChange((_, session) => {
        session ? set(session.user) : set(null);
    });
    return () => {
        unsubscribe.data.unsubscribe();
    };
});

is there a demo of how to properly use the setauth for supabase and svelte?

man, i just tryna fix this cookie problem for like 2 weeks now

idk how their isnt a clear way to do this yet 😦

so going to go through it, btw one last question

how should something like this be solved im creating a website like eventbrite the published events on the homepage, should be seen by everyone but only the auth user who created the event should be able to access the backend to see the event and update it accordingly im thinking for read access isPublished = true would mean that everyone would be able to see it and for update auth.uid() = user_id but then if anyone goes to the backend with the url for the specific link, they would be able to access it not so? access it, meaning would be able to see the data

thanks for all the help