mirror of
https://github.com/supabase/supabase.git
synced 2026-05-06 17:00:27 -04:00
Chris Chinchilla
d8bd6b047c
## I have read the [CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md) file. YES <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Documentation** * Updated examples and guides to use Supabase publishable (client) keys instead of anon keys for client-side usage across frameworks and platforms. * Renamed environment variable examples and .env templates to reflect publishable key naming. * Adjusted sample requests and client-init examples to send/use the publishable key via the apikey header where applicable. * Updated references from service_role to secret for server-side credential guidance. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> Co-authored-by: fadymak <fady@fadymak.com>
Flutter Supabase MFA Example
A Flutter app demonstrating how to implement Multi-Factor Authentication (MFA) with Supabase and Flutter. A user can sign up, add MFA via an authenticator app, and only after they have signed in using MFA they can view the content from the database.
- Full tutorial article here
Getting Started
- Create a new Supabase project here
- Add your Supabase credentials to
lib/main.dart - Run the following SQL from the SQL editor of your Supabase dashboard to create a table and dummy data
-- Dummy table that contains "secure" information
create table if not exists public.private_posts (
id int generated by default as identity primary key,
content text not null
);
-- Dmmy "secure" data
insert into public.private_posts
(content)
values
('Flutter is awesome!'),
('Supabase is awesome!'),
('Postgres is awesome!');
-- Enable RLS for private_posts table
alter table public.private_posts enable row level security;
-- Create a policy that only allows read if they user has signed in via MFA
create policy "Users can view private_posts if they have signed in via MFA"
on public.private_posts
for select
to authenticated
using ((select auth.jwt()->>'aal') = 'aal2');
- Run the app and test the login flow 🚀