Amir Hosseini

Claude Code 'fixed' my permission error by turning RLS off. Is that as bad as it sounds?

User lost their phone and is locked out by 2FA, how do I reset it?

Hundreds of fake signups overnight, all with random gmail addresses

Claude Code used supabase.auth.getUserById in the browser, TypeError

Bolt + Supabase: new row violates row-level security policy for table "profiles"

Supabase Google login in Expo redirects to localhost:3000 and the app never gets the session

middleware.ts crashes: The edge runtime does not support Node.js 'crypto' module

Is it bad that my Supabase key is visible in my Lovable app's JavaScript?

Cursor added an npm package I can't find on GitHub, safe to install?

Deleted a user in Supabase but they're still logged in and can use the app

Users can give themselves unlimited credits by editing their own profile row

Added 2FA with Supabase but login never asks for the code

OAuthAccountNotLinked when a user who signed up with GitHub tries Google

Users can make themselves admin by editing their own Firestore document

Google OAuth refresh_token is null, and the one I had stopped working after a week

Magic link always 'expired' for users with company Outlook email

My admin page is just hidden from the menu, is that protection?

Google login in my Lovable app sends people to localhost:3000 after they pick their account

How do I show other users' emails in my app? auth.users isn't accessible

App review says they can't log in, but my login is a magic link