d3ro-voice/server/supabase/config.toml
윤찬 eb4c504fea fix(admin): RLS 재귀 수정 + OAuth 쿠키 + 코드 정리
- RLS: profiles 재귀 참조 → app_metadata 기반으로 교체
- auth callback: 쿠키를 response에 직접 설정 (세션 유지)
- middleware: Supabase 세션 갱신 추가
- layout: requireAdmin() 사용으로 통합 (중복 제거)
- admin-guard: app_metadata.role 기반 (JWT, DB 쿼리 불필요)
- debug 라우트 제거
- config.toml: localhost:3000/3001 redirect URL 추가
2026-04-12 20:52:56 +09:00

127 lines
2.2 KiB
TOML

# Supabase 프로젝트 설정 (로컬 개발 + CLI 기준)
# 공식 문서: https://supabase.com/docs/guides/cli/config
project_id = "d3ro-voice"
[api]
enabled = true
port = 54321
schemas = ["public", "storage"]
extra_search_path = ["public", "extensions"]
max_rows = 1000
[db]
port = 54322
shadow_port = 54320
major_version = 17
[db.pooler]
enabled = false
[db.seed]
enabled = true
sql_paths = ["./seed.sql"]
[realtime]
enabled = true
[studio]
enabled = true
port = 54323
[inbucket]
enabled = true
port = 54324
[storage]
enabled = true
file_size_limit = "50MiB"
[auth]
enabled = true
site_url = "http://localhost:5173"
additional_redirect_urls = [
"http://localhost:5173",
"http://localhost:3000",
"http://localhost:3001",
"https://d3ro.dev",
"d3ro-voice://auth-callback"
]
jwt_expiry = 3600
enable_signup = true
enable_anonymous_sign_ins = false
enable_manual_linking = false
[auth.email]
enable_signup = true
double_confirm_changes = true
enable_confirmations = false
[auth.external.google]
enabled = true
client_id = "env(GOOGLE_OAUTH_CLIENT_ID)"
secret = "env(GOOGLE_OAUTH_SECRET)"
redirect_uri = ""
[auth.external.github]
enabled = true
client_id = "env(GITHUB_OAUTH_CLIENT_ID)"
secret = "env(GITHUB_OAUTH_SECRET)"
redirect_uri = ""
[auth.external.apple]
enabled = true
client_id = "env(APPLE_OAUTH_CLIENT_ID)"
secret = "env(APPLE_OAUTH_SECRET)"
redirect_uri = ""
[edge_runtime]
enabled = true
policy = "per_worker"
inspector_port = 8083
[functions.stt-proxy]
verify_jwt = true
[functions.llm-proxy]
# 2026 sb_publishable_ 키와 Gateway JWT 검증 비호환 — requireUser()에서 직접 인증
verify_jwt = false
[functions.stripe-checkout]
verify_jwt = true
[functions.stripe-portal]
verify_jwt = true
[functions.stripe-webhook]
verify_jwt = false
[functions.payple-checkout]
verify_jwt = false
[functions.payple-webhook]
verify_jwt = false
[functions.payple-manage]
verify_jwt = false
[functions.payple-renew]
verify_jwt = false
[functions.team-invite]
verify_jwt = true
[functions.team-accept]
verify_jwt = true
[functions.send-push]
verify_jwt = true
[functions.embed-chunks]
verify_jwt = true
[functions.search-knowledge]
verify_jwt = true
[analytics]
enabled = false