mirror of
https://github.com/supabase/supabase.git
synced 2026-10-11 04:15:04 +03:00
38 lines
1.9 KiB
Plaintext
38 lines
1.9 KiB
Plaintext
---
|
|
id: 'product-security'
|
|
title: 'Secure configuration of Supabase products'
|
|
description: 'Supabase provides a secure yet flexible set of products. Here is how to adjust various security settings across the various products.'
|
|
---
|
|
|
|
The Supabase [production checklist](/docs/guides/deployment/going-into-prod) provides detailed advice on preparing an app for production. While our [SOC 2](/docs/guides/security/soc-2-compliance) and [HIPAA](/docs/guides/security/hipaa-compliance) compliance documents outline the roles and responsibilities for building a secure and compliant app.
|
|
|
|
Various products at Supabase have their own hardening and configuration guides, below is a definitive list of these to help guide your way.
|
|
|
|
## Auth
|
|
|
|
- [Password security](/docs/guides/auth/password-security)
|
|
- [Rate limits](/docs/guides/auth/rate-limits)
|
|
- [Bot detection / Prevention](/docs/guides/auth/auth-captcha)
|
|
- [JWTs](/docs/guides/auth/jwts)
|
|
|
|
## Database
|
|
|
|
- [Row Level Security](/docs/guides/database/postgres/row-level-security)
|
|
- [Column Level Security](/docs/guides/database/postgres/column-level-security)
|
|
- [Securing your API](/docs/guides/api/securing-your-api)
|
|
- [Custom claims and role based access control](/docs/guides/api/custom-claims-and-role-based-access-control-rbac)
|
|
- [Managing Postgres roles](/docs/guides/database/postgres/roles)
|
|
- [Managing secrets with Vault](/docs/guides/database/vault)
|
|
- [Superuser access and unsupported operations](docs/guides/database/postgres/roles-superuser)
|
|
|
|
## Storage
|
|
|
|
- [Object ownership](/docs/guides/storage/security/ownership)
|
|
- [Access control](/docs/guides/storage/security/access-control)
|
|
- The Storage API docs contain hints about required [RLS policy permissions](/docs/reference/javascript/storage-createbucket)
|
|
- [Custom roles with the storage schema](/docs/guides/storage/schema/custom-roles)
|
|
|
|
## Realtime
|
|
|
|
- [Authorization](/docs/guides/realtime/authorization)
|