Is there a super-basic starter kit for a CRUD app with user logins to deploy on supabase?
Supabase Vault is now in Beta
21–29 of 29 posts
Re: Supabase Vault is now in Beta
#22Is there a super-basic starter kit for a CRUD app with user logins to deploy on supabase?
there are a few frameworks to choose from in the "getting started" section of our docs: https://supabase.com/docs/guides/getting-started
Re: Supabase Vault is now in Beta
#23Earlier quoted context omitted.
forgive my ignorance first of all. One of the things i was going to work on this weekend was an enhancement to a side project and it involves storing some sensitive information in a database. My usual way of doing this is strong encryption in the application code with a key from an environment variable then base64 encode the result and put it in a text column. Is Vault something that can handle this without getting i…
> Is Vault something that can handle this without getting into my app code? Basically, if i gave a someone root access to my supabase instance is that encrypted data safe? The answer is slightly offset from your question, so let me start by pointing out that the Vault is about Encrypted Data At Rest . This is mentioned in the docs and in the blog and video, but it's something that I like to always mention first in di…
I'm building the "in-use" part of this right now...what if you could encrypt your data with an encryption key (at-rest), but also to a set of code that is allowed to decrypt it (in-use). If that code is identified cryptographically, its identity can't be spoofed or stolen.
We're exploring secure enclaves as the protected runtime env and the code attestation generation: https://github.com/edgebitio/enclaver
This post has made me add pgsodium to my reading list :)
Re: Supabase Vault is now in Beta
#24hey hn, supabase ceo here Vault is a Postgres extension that wraps pgsodium/libsodium. It enables 2 key features: 1. Secrets management - you can store things like API Keys 2. Transparent Column Encryption (TCE)[0]. This allows you to encrypt a column in any of your tables, with a View for "selecting" out the decrypted data. It enables "row level encryption" too when you create a key for each row. The blog post detai…
Referencing my previous request on the other thread for push notifications:
You did it! The crazy sunoffabeach, you did it!
BRB, friendship ended with Firebase, Supabase is my new best friend.
Re: Supabase Vault is now in Beta
#25Earlier quoted context omitted.
> Is Vault something that can handle this without getting into my app code? Basically, if i gave a someone root access to my supabase instance is that encrypted data safe? The answer is slightly offset from your question, so let me start by pointing out that the Vault is about Encrypted Data At Rest . This is mentioned in the docs and in the blog and video, but it's something that I like to always mention first in di…
I'm building the "in-use" part of this right now...what if you could encrypt your data with an encryption key (at-rest), but also to a set of code that is allowed to decrypt it (in-use). If that code is identified cryptographically, its identity can't be spoofed or stolen. We're exploring secure enclaves as the protected runtime env and the code attestation generation: https://github.com/edgebitio/enclaver This post…
One benefit of the approach we are taking is that you can use regular Postgres security rules and policies (GRANTs, RLS, etc) to constrain access to decrypted secrets. It's not quite going all the way to encrypted VMs, but it's better than all or nothing.
Secure enclaves is something that is on our list, one issue we have is that so many of our components we ship are extensions and open source projects, attestation becomes very hard. We've considered a very, very minimal postgres build with almost no extensions enabled except pgsodium, which would run on an encrypted VM purely for the purposes of secret storage, but then "in-use" becomes rather restricted. Definitely open to hearing any ideas you may have on the subject!
Re: Supabase Vault is now in Beta
#26>Group encryption: [...] Came here to ask just about that but I see it's on your roadmap already, that's good and godspeed with that since encryption is hard . During my PhD, I worked a little while with threshold encryption schemes (sometimes called horcrux encryption schemes, i.e. make n keys, you need at least m of them to perform some operations) (ref. my noob-ish question here ha https://crypto.stackexchange.com…
You've hit the nail right on the head with this question on how hard group encryption is, and we don't have all the answers yet as we are still working the use cases around it. We are hoping to reach a level of security that you mention in your SE question using something similar to the excellent accepted answer, distributed private key sharing among trusted participants. The basis we are exploring is using an algori…
Signcryption looks very interesting, indeed. I haven't taken a look at the space for a couple years but this renewed my interest.
I'll write you an email, for sure. Cheers!
Re: Supabase Vault is now in Beta
#27hey hn, supabase ceo here Vault is a Postgres extension that wraps pgsodium/libsodium. It enables 2 key features: 1. Secrets management - you can store things like API Keys 2. Transparent Column Encryption (TCE)[0]. This allows you to encrypt a column in any of your tables, with a View for "selecting" out the decrypted data. It enables "row level encryption" too when you create a key for each row. The blog post detai…
Referencing my previous request on the other thread for push notifications: You did it! The crazy sunoffabeach, you did it! BRB, friendship ended with Firebase, Supabase is my new best friend.
I’m guessing you so the OneSignal partnership - I’m glad you like it. Please send any feedback and we’ll continue to evolve that part of the product
Re: Supabase Vault is now in Beta
#28The velocity at which Supabase releases new tooling (and most of it open source) never ceases to amazing be. Especially on the Postgres front.
I think it’s great too. I wish they would shore up some of their existing releases though. Probably most notably, the ability to query aggregates via the officially supported route is missing: https://github.com/supabase/postgrest-js/issues/206
The workarounds suggested are not ergonomic for most use cases and it feels pretty out of place for such basic functionality to be missing in what otherwise feels like a pretty full featured product.
Their Realtime product is another example of something that languishes while new features get launched.
Re: Supabase Vault is now in Beta
#29The velocity at which Supabase releases new tooling (and most of it open source) never ceases to amazing be. Especially on the Postgres front.
I think it’s great too. I wish they would shore up some of their existing releases though. Probably most notably, the ability to query aggregates via the officially supported route is missing: https://github.com/supabase/postgrest-js/issues/206 The workarounds suggested are not ergonomic for most use cases and it feels pretty out of place for such basic functionality to be missing in what otherwise feels like a prett…
thanks for the feedback and specific links. I'll chat to Steve (PostgREST maintianer).
Can you share more about the Realtime server? What would you like to see there?