supabase-py

supabase-py copied to clipboard

If your table has a field called "apikey" queries will always be truthy regardless of if they really are

data = supabase.table('users').select('email, api_key').eq('api_key', 'fakekey').execute().dict()

data will always return data... Found the javascript issue after 2.5 hours of questioning the nature of reality.

This bug existed and was fixed in the javascript version of supabase https://github.com/supabase/supabase/issues/5465

Hi! Thanks for creating the issue. As far as I can read, rhis issue wasn't solved, but only documented. They solution the supabase team gives is to name that column with a prefix user_apikey.

I'll mark this issue as a wontfix until it's solved upstream