Authenticated accounts
Email/password aur optional Google sign-in Supabase Auth ke through sambhale jaate hain. Protected workspace routes ke liye valid session zaroori hai.
Security
Un records ki suraksha jin par aapka business tika hai.
Security ek lagataar chalne wali product zimmedari hai. Yeh page batata hai ki distributor.live mein filhaal kaun se controls maujood hain aur koi chinta kaise report karein.
Maujooda controls
Kya pehle se maujood hai
Row-level data controls
Database access Supabase row-level security ke aas-paas banaya gaya hai, taaki authenticated operations sambandhit user tak seemit rahein.
Session handling
Server-side routes authenticated session secure same-origin cookies se padhte hain, aur middleware session state refresh karta hai.
Browser security headers
Application content-security, transport-security, framing, referrer aur permissions headers bhejta hai, taaki aam browser risk kam ho.
Guarded image uploads
Upload endpoint ke liye authentication zaroori hai, payload size seemit hai, aur third-party upload key server par hi rehti hai.
Sirf server par privileged access
Privileged service credentials sirf server-only code mein rehte hain aur browser bundle mein shamil nahi kiye jaate.
Shared responsibility
Workspace ko surakshit rakhne mein aapka hissa.
01
Unique password use karein aur apne email ya Google account ka access surakshit rakhein.
02
Shared device par sign out karein aur jab koi team member account use na kare to uska access hata dein.
03
Storefront, catalog aur invoice data business ke bahar share karne se pehle jaanch lein.
04
Unexpected access, suspicious message ya leak hui credentials turant report karein.
Responsible disclosure
Koi vulnerability mili?
Saaf description, affected URL ya feature, reproduction steps aur sambhavit impact bhejein. Kripya doosron ka data access na karein, service mein rukawat na daalein, aur jaanch ka uchit mauka milne se pehle koi live issue publish na karein.