How can I make authenticated requests from a Next.js API route? I have a write policy for auth.uid() = user_id and Client side works fine but not Server side

Hello @João Vitor! This thread has been automatically created from your message in #843999948717555735 a few seconds ago. We have already mentioned the @User so that they can see your message and help you as soon as possible! Want to unsubscribe from this thread? Right-click the thread in Discord (or use the ``...`` menu) and select "Leave Thread" to unsubscribe from future updates. Want to change the title? Use the ``/title`` command! We have solved your problem? Click the button below to archive it.

You have to get your user jwt to the api and set the clent on the server side to use it. One common function as part of that: https://supabase.com/docs/reference/javascript/auth-setauth

@garyaustin I'm doing this right now https://github.com/jvzaniolo/my-ecommerce-app/blob/main/src/pages/api/cart.ts#L8

There should be no extra db calls there. setAuth just sets the jwt in the client object.

I mean for every API route

I don't use server side stuff, but somehow does the server side have to potentially deal with a different users on each call so must set the client jwt? Here is a library of stuff Supabase has come up with, but may be overkill for you as it also deals with serverside login. https://github.com/supabase-community/auth-helpers

Yeah, I didn't want to use auth-helpers cause I think it's over engineering and I would also like to learn how things work with supabase on the server side

You might want to re ask a new question specifically with what you are doing and ask if there is a better way with multiple routes. You could certainly have a function call to clean up code, but still would do the same stuff in each API route. There may also be something in next.js that understands sharing info among API routes, but I don't use it.

Okay, thank you Do you know if this was recorded ?https://twitter.com/supabase/status/1507024485592932358

I've not seen a general repository of videos, so all I could do is google to search.

I couldn't find it in the official youtube page, but it's fine

within reason.

This is the schema I thought of

The user and product are no brainers. Something does not seem right about Order and Cart.

Could the column be an array?

So you have an order and want more detail of all items in that order?

Yes

It might work if you have an incrementing id and then a non-unique cart id.

I would like to have a schema like this

js
var user = { id, email, first_name, last_name }
var product = { id, name, description, price, stock }
var cart = { id, user_id, products: [], sub_total }
var order = { id, user_id, cart_id }

Yes, so if your cart table allows has a unique id column, just for index (or I guess maybe no primary key... not sure) then you can have multiple entries with the same cart_id so works like an array.

got it, I could maybe make the

cart.id

a foreign key to

user.id

and a non unique key

Well it is just like a message table with messages pointing to a topic.

I'll try this

So not cart_id reference in order, the other way around

Do you know what this is?

You can have an array column, but you can't have array of fks.

Gotcha

You would have to do another select on the array values

A web dev trying to design a database, lol

Thread was archived by @João Vitor. Anyone can send a message to unarchive it.