I set up a basic RLS policy on a new table I creat...
# helpt
tandyman
03/27/2022, 1:47 AMI set up a basic RLS policy on a new table I created, called client_profiles. The policy is for select, and the rule is simple: (uid() = agent_id), yet, I'm getting no items back now. I guess more my question is how can I troubleshoot to see WHY rls failed or "chose to protect"...is there anywhere I can see why maybe the ids aren't matching, etc?
n
Needle
03/27/2022, 1:47 AMHello @tandyman!
This thread has been automatically created from your message in #843999948717555735 a ``few seconds ago``.
Pinging @User so that they see this as well!
Want to unsubscribe from this thread?
Right-click the thread in Discord (or use the ... menu) and select Leave Thread to unsubscribe from future updates.
Want to change the title?
Use the
/titleg
garyaustin
03/27/2022, 2:10 AMI would first turn RLS off, does it work?, then if it does set policy to (auth.role() = 'anon'). If that works then you are not logged in. Next (auth.role() = 'authenticated'). If that works you have a user. Then with your policy if agent_id is a uuid column and there is a match, you should get a result.
n
Needle
03/27/2022, 2:10 AMtandyman (2022-03-27)
t
tandyman
03/27/2022, 2:12 AMok
tandyman
03/27/2022, 2:13 AMoff = yes
tandyman
03/27/2022, 2:13 AMi'll move to the next
tandyman
03/27/2022, 2:13 AManon yes
g
garyaustin
03/27/2022, 2:14 AMStop
garyaustin
03/27/2022, 2:14 AMYou don't have a logged in user.
t
tandyman
03/27/2022, 2:14 AMwhat do you mean?
g
garyaustin
03/27/2022, 2:14 AMIf anon works, then you don't have a signed in user, or when you make the call you do not.
t
tandyman
03/27/2022, 2:15 AManon works, and authenticated fails
tandyman
03/27/2022, 2:15 AMin the nextJS app, I am logged in
tandyman
03/27/2022, 2:15 AMso there's the disconnect?
g
garyaustin
03/27/2022, 2:15 AMIf anon works that means there is no token set in the header for the call. Yes there is a disconnect
garyaustin
03/27/2022, 2:16 AMuid() will be null as there is no user token when you make the call.
t
tandyman
03/27/2022, 2:17 AMhmm
tandyman
03/27/2022, 2:17 AMso now I have to find why
tandyman
03/27/2022, 2:17 AMI'm using a stripe starter repo and have been building on top of that, so all of that I thought was handled already
tandyman
03/27/2022, 2:17 AMthere is a useUser() hook, etc
tandyman
03/27/2022, 2:19 AMconst { data: clientProfiles, error } = await supabaseClient
.from('client_profiles')
.select(
*tandyman
03/27/2022, 2:19 AMso supabaseClient isn't adding the token?
g
garyaustin
03/27/2022, 2:20 AMDo you have a signin process?
t
tandyman
03/27/2022, 2:20 AMyes
tandyman
03/27/2022, 2:20 AMand it's signed in
tandyman
03/27/2022, 2:22 AMon every page load I see the user object being returned after it does a GET on the user endpoint
g
garyaustin
03/27/2022, 2:22 AMThe threads are full of nextjs stuff and I don't use it, but know it is a bit tricky dealing with signin on server side... Most seem to be drifting to this: https://github.com/supabase-community/supabase-auth-helpers BUT I DON'T want to steer you wrong... Do some searching here or discussions on github and re ask about nextjs and no user when you make call or some such. You are not at RLS issue yet.
t
tandyman
03/27/2022, 2:23 AMahh
tandyman
03/27/2022, 2:23 AMapparently that is what is being used already
tandyman
03/27/2022, 2:23 AMimport { withAuthRequired, supabaseClient } from '@supabase/supabase-auth-helpers/nextjs';
tandyman
03/27/2022, 2:23 AMso that is where i'm getting supabaseClient
g
garyaustin
03/27/2022, 2:25 AMSorry can't be more help with nextjs.
t
tandyman
03/27/2022, 2:25 AMthat's ok, it's a great answer though, so show me layer by layer how to approach
tandyman
03/27/2022, 2:25 AMthat helps me "fish"
tandyman
03/27/2022, 2:26 AMmuch appreciated sir 🍷
tandyman
03/27/2022, 2:45 AMyou are exactly right, their readme covers directions specifically when making the call server side...and that starter project was not implemented with an example ready to handle with RLS
tandyman
03/27/2022, 2:52 AMworked!
g
garyaustin
03/27/2022, 3:08 AMMy role as traffic cop paid off... 👍
t
tandyman
03/27/2022, 3:19 AMhahaha