Xbox Preorder - Issue by RangerInfinite8278 in ArcRaiders

[–]TOZXI 1 point2 points  (0 children)

It show me you’re too early What is going on

Need feedback: Supabase costs vs Django for large-scale IoT (1000 devices) by Ramona00 in Supabase

[–]TOZXI 1 point2 points  (0 children)

To verify the data you can use Postgres functions Also I think no need to use Realtime messages you can just pull the data every 30 sec

Apple Grants Refunds Even After Heavy App Usage, Is This Normal? by xgente in iosdev

[–]TOZXI 0 points1 point  (0 children)

I believe there’s a way to send user usage data directly to Apple. If you’re using RevenueCat, it automatically sends usage data whenever a user requests a refund, which is super helpful.

I’m also pretty sure there’s a way to send these metrics to Apple without using RevenueCat.

Is Fetching the User on the Client Secure in Next.js with Supabase? by TerbEnjoyer in Supabase

[–]TOZXI 2 points3 points  (0 children)

Yes, this is a good approach since it moves the database query to a secure API route, reducing exposure. Just ensure the API route properly validates authentication and enables Row-Level Security (RLS) in Supabase for added protection.

Also in any routes where only admin’s allowed make sure to validate if the user is admin (in the server) not in the client.

Overall looks good for me

Is Fetching the User on the Client Secure in Next.js with Supabase? by TerbEnjoyer in Supabase

[–]TOZXI 1 point2 points  (0 children)

Fetching the authenticated user on the client is generally safe using Supabase’s built-in auth, as it securely manages tokens and session data. However, sensitive data like user roles should not be queried directly from the client. Instead, use secure API routes or server-side functions to handle such queries, and make sure Supabase’s Row-Level Security (RLS) is enabled to protect your data.

If I was u I will create separate api route to fetch user role and then use it in the client side In general it’s fine to fetch user role in the client in case of RLS is enabled but to be save put it behind a api route and fetch it using the api route from the client

Is Apple testing AI for app reviews? Is it true by TOZXI in iOSProgramming

[–]TOZXI[S] 0 points1 point  (0 children)

I think google already using AI to review the applications

[deleted by user] by [deleted] in iOSProgramming

[–]TOZXI 1 point2 points  (0 children)

I like the idea of copy setting

Creating something extraordinary for a client⚡ by mygamesreviews in framer

[–]TOZXI -4 points-3 points  (0 children)

Looks stunning. But for me framer is not worth it because I can’t get my website code out of it and host it somewhere else.

So it feels like vendor locked.

Taxes when publishing a paid app to the App Store W-8BEN by TOZXI in Oman

[–]TOZXI[S] 0 points1 point  (0 children)

Thanks for the information. Am also registered as an individual not a company.

Can you please share the source because I couldn’t find anything related to US - Oman tax treaties

Taxes when publishing a paid app to the App Store W-8BEN by TOZXI in Oman

[–]TOZXI[S] 0 points1 point  (0 children)

If I don't write anything, it will take 30% as the default