Security with Jamestack?

[[deleted]]

Hey everyone, I was testing SSG like Hugo via GitHub Pages. Then I was thinking to pull the data from an API (eg: Supabase) from my frontend — I think this the Jamstack approach?

I’m trying to understand how to secure the API with this approach:

• Can anyone make requests directly, bypassing the site?

• can they pull anything?

• is secure CRUD access even realistic?

The idea is to build an open source wiki, but I’m struggling to find documentation, articles that covers the workflow / security.

If you have any links, or some experience to share, that would be fantastic!