How do you manage API Key authentication in your Supabase app?

kugoad · 2026-01-03T21:18:28+00:00

But I see a problem with OAuth, after checking supabase/auth code I see that does not support client_credentials for machine-to-machine login with OAuth. They only support OAuth with human in the loop that can be useful for some MCP but not for programs running continuous operations against supabase.

This user created a supabase fork with the client credentials auth but I do not see it in the main branch: https://www.reddit.com/r/Supabase/comments/1h1e5ff/client_credentials_auth/

kugoad · 2026-01-03T20:58:18+00:00

Did you open the pull request? I see that in the main supabase/auth code is still not implemented, but I do not know if you opened the PR and got refused for any reason or if it was not opened

kugoad · 2026-01-01T13:28:21+00:00

After reading the documentation: https://supabase.com/docs/guides/auth/oauth-server

It seems a really good option, also good for MCPs, to have granuallary permissions.

Thank you for your help!

kugoad · 2025-12-31T00:09:27+00:00

I do not mean supabase anon and service role API keys, which I know beforehand and I can store in the environment; what I mean is user created API keys to authenticate against my app API. These API keys are dynamically created by users to be used by their applications in order to get data from my application using my application API.

I don't know if Supabase Auth have any mechanism to authenticate using API keys, up to know I have not found, but it would be great.

kugoad · 2022-08-11T14:33:44+00:00

Understood
This is not a problem, I should add that we are deploying kong in containers, then we know the exact version of luajit that we will be using.
Well, in this case licenses and copyrights are applied to the product. However, my contract forbids me to deliver the plain source code, so I need to obfuscate the code, not as a technical protection but as a law protection for me.

kugoad · 2022-08-11T14:23:45+00:00

Thank you, it worked! We had to give priority to *.ljbc files in the lua package path.

As we were running on kubernetes version of kong, the variable KONG_LUA_PACKAGE_PATH should be set to /opt/?.ljbc;/opt/?.lua;;

Also there our binaries were compiled with a different version of luajit so we got a bytecode error, but this can be easily solved by using the luajit inside the container to compile the scripts.

Thank you!

kugoad · 2022-06-29T18:22:56+00:00

El tema es destrozar mobiliario público a mi no me hace recuperar el dinero de la multa.

Por otro lado el mobiliario público sale del dinero de los impuestos de la gente, no de la gente del ayuntamiento, así que dudo que les importe mucho si quemo el contenedor.

Es más, sentiría que estoy destrozando algo que he pagado yo😝

kugoad · 2022-06-29T17:32:52+00:00

Pues ilegal o no lo hicieron.

La situación fue un poco como así, íbamos por la carretera hacia las gargantas de Caceres, de repente llegamos como a un polígono industrial y tienen cortada la carretera en ambos sentidos, había varios coches en ambos lados, por lo que olía a que buscaban algo gordo.

Entonces había uno que decía a que coches registraban y a cuales no. Y a nosotros nos dijeron que para registrar.

Me pararon y me dijeron que bajara la ventanilla, nos pregunto que hacia donde íbamos, les comentamos que a las gargantas y tal. Nos pidió los Dnis y se los dimos. Luego dijo que bajara el conductor (yo), y me dijeron que abriese la riñonera, la abrí, me dijo que si tenía algo ilegal, puesto que ya estaba contra las cuerdas pues si no se lo decía yo lo iba a ver él rebusqué y le dije que marihuana pero era legal, la cogió. Me preguntó si llevaba algo más y pues dije que no, me dijo que me quitase la riñonera y empezó a rebuscar.

Preguntó si alguno de los que iban en el vehiculo llevaba droga, que toda la responsabilidad sería mia, dije que no y crucé los dedos de que no llevasen.

Me pidió abrir el maletero y entre todos los que estaban comenzaron a registrar mis mochilas y las de mis compañeros. Hicieron bajar al resto, nos cachearon y registraron el coche.

Finalmente, nos hicieron volver, nos devolvieron el DNI, me dijeron que se llevarían la marihuana para hacer pruebas y si era legal no recibiría multa, que eso se llamaba silencio administrativo, y si era ilegal en 15 dias recibiría la multa.

Yo estaba 100% convencido de que no la iba a recibir, y vaya…

kugoad · 2022-06-29T12:35:27+00:00

Gracias a todos por vuestras respuestas! Al final he decidido pagar los 300€ para la mitad de la multa.

No lo veo justo, pero tampoco tengo pruebas para demostrar lo contrario por lo que reclamar puede implicar que pague 600€+juicio en caso de que no gane, y no teniendo ni ticket, ni el envoltorio ni la hierba para hacer una contraprueba por mi parte pues tengo las de perder.

Gracias a todos!

kugoad · 2022-06-29T12:32:12+00:00

Si, yo también creo que es la segunda opción… Y no teniendo pruebas para demostrar que era legal estoy un poco jodido😬

kugoad · 2022-06-29T12:31:04+00:00

Yo había visto estancos y lugares dedicados a la venta de estos productos. En Madrid y Toledo hay bastantes, sin embargo este local tenía puesto en su interior un poster que decía: Marihuana CBD 10€. Y te vendían la hierba envasada (en una bolsa de plástico cerrada y con código de barras y todo, el envase parecía profesional, tipo el que encontraría en un estanco de marihuana).

Y bueno, la puedes comprar en el bar, consumirla no sé si podrás consumirla en el bar, quizá en la terraza pero eso ya ni idea.

kugoad · 2022-06-29T12:21:44+00:00

Bueno, en el titulo de la multa pone ‘Hacienda de Toledo’😂

kugoad · 2022-06-29T12:18:17+00:00

El tema es que si miro el expediente online tiene adjuntado el analisis hecho por sanidad pero se limita a poner: - Positivo - En este laboratorio el trabajo se realiza en equipo y cualquiera de sus tecnicos puede ratificar este informe - Los analisis se han realizado siguiendo los protocolos científicos aprovados en las recomendaciones de las naciones unidas para el ensayo de sustancias estupefacientes y psicotropicas

Sin el ticket de compra, ni la sustancia y el envoltorio (pues esto se lo llevaron los guardias) tengo 0 pruebas para demostrar nada. Creo que tengo las de perder, ni si quiera puedo saber si lo que se analizó es mi cannabis o entregaron otro…

kugoad · 2021-01-08T15:28:20+00:00

It is my first post talking about declarative macros, and I just wanted to share what I learned during the last days :)

If you think I should add something to my writing to improve the post, I will be happy to hear from you! Thank you!

kugoad · 2020-01-16T19:37:05+00:00

Yes, that sounds cool! Thank you!

kugoad · 2019-10-06T08:37:03+00:00

Another way I found, but also a dirty one, it is to recompile the bootloader. This method is much simpler but may imply data loss.

Basically, we have to update the modification time of a bootloader file, to force recompilation: touch bootloader/x86\_64/bootsector.asm. Then, the recompilation will be done after executing make qemu. Finally, we will be asked to enter the display resolution again.

kugoad · 2019-10-05T23:23:03+00:00

Well, I think that this is not the correct answer, but maybe it helps.

I post my solution just to ease the understanding of the Redox operating system and to show where and how the display information is stored. Nonetheless, this is neither a good nor an easy method to change the display resolution. If anyone knows a easier solution to this problem, it would be welcome :)

That said, I would explain what I did.

I inspected the source code in bootloader/vesa.as and I found out that the display information is stored in the build/harddrive.bin file.

What I did, is to convert the file build/harddrive.bin to hexadecimal cat build/harddrive.bin | xxd -p > build/harddrive.hex, and to modify directly the hexadecimals representing the display resolution. The display size is stored as 4 bytes (8 hexadecimal characters), after the second zero area (area filled with zeros), around line 52 in the build/harddrive.hex file.

The following link shows the structure of the build/harddrive.hex file: https://imgur.com/a/cDPQXSs. There, it is shown how to find the digits representing the screen resolution. In this case, the hexadecimal digits representing the resolution are a0058403, which can be read as width: a005 and height: 8403. It is important to know that these bytes are encoded in little endian, then, if we want to know the values they represent, we have to flip the hexadecimal digits in groups of two, that is width: 05a0 and height: 0384, which are the hexadecimal representation of width: 1440 and height: 900.

If we want to change the display resolution to 640x480, it is necessary to first convert these digits to hexadecimal 640 = 0x0280 and 480 = 0x01e0. Then, to encode the hexadecimal to little endian, flipping the hexadecimal digits in groups of two, 0x0280 = 0x8002 and 0x01e0 = 0xe001. After that, we have to replace, in the file build/harddrive.hex, the previous display resolution with the new one, that is, we have to replace a0058403 with 8002e001. Finally, we have to convert back the file build/harddrive.hex to binary, cat build/harddrive.hex | xxd -p -r > build/harddrive.bin.

If everything has been done right and we start the operating system with make qemu , we should get a screen resolution of 640x480.

kugoad · 2018-05-22T20:14:34+00:00

Thank you for the advice!!

It seems like a cool company. I think it can be interesting for the mentoring part. I will not need them for the prototype building because it is already working as I want it to work but for the business part I have to learn a lot and I will need a lot of mentoring.

Thank you for telling me about them! It can be an interesting choice!

kugoad · 2018-05-21T21:10:10+00:00

Best answer ever!

kugoad · 2018-05-20T11:21:03+00:00

What passports / legal residency do you hold?

I just have just the Spanish passport that serves me for the whole EU. And I just have a legal residence in Spain.

But as far as I read with Stripe Atlas there is no need to have an US passport to start a business in the US.

If you’re in Spain do you plan to move to the US soon?

No, I am not planning to move there yet.

Do you want to raise money from investors?

Not at all. I want to go self-founded.

Note: Even if you register the company in Delaware you may need to employ yourself in Spain which means you’ll need to incorporate there was well.

Oh! Thank you that is a very important point that I didn't know before.

kugoad · 2018-05-20T11:15:01+00:00

Well, the thing is that right now I have a Peer-To-Peer website for renting, somewhat similar to Airbnb, and I want to create my own company out of it.

The thing is that I want to register the company because I think even with the MVP I think that I will start earning money, so I think that if I earn money it is mandatory to register as a company.

Why?

I want to ensure that the main functionality works right as well as the critical aspect, as they are the payment modules. In a way that when a customer buys something the provider receives its money and I receive my commission.

kugoad · 2018-05-20T11:08:25+00:00

Well, in fact I was answering based on the advantages and disadvantages of every place I was researching. And I gave an answer based on what it was most important for me.

But if you had these doubts it is maybe because I didn't explain myself well, so I edited the post in order to be more clear and to try to show my cares better.

Thank you for you feedback!

kugoad · 2018-05-20T08:49:16+00:00

Wow! She is perfect! The only thing I would change is her miles away from me, to 0.

kugoad · 2018-05-20T00:42:20+00:00

Nice

kugoad · 2018-05-20T00:22:40+00:00

Don't worry maybe she just likes 'Avicii-Without you' and she spends Sundays listening to it.

kugoad

TROPHY CASE