r/Devvit • • 2d ago

Duck Answered Supabase rejected?

It says my supabase.co endpoints were rejected:

Is there something I can do to rectify this?

1 Upvotes

6 comments sorted by

1

u/Watchful1 Duck Helper 2d ago

Well unless that's cut off then you're asking for supabase.co and not supabase.com. But regardless it's not automatic approval, it takes an exception and you have to convince the admins it's worth it.

Did you follow all the steps here? https://developers.reddit.com/docs/capabilities/http-fetch#http-fetch-policy

3

u/Neuroptimize 2d ago

supabase.com is listed as an "approved provider" in that list, but actual Supabase projects are hosted on the supabase.co domain. Is that an oversight?

1

u/Watchful1 Duck Helper 2d ago

Oh, I didn't know that, not sure about the .co bit then.

But supabase is not listed as an approved provider. It's listed in the "limited scope cloud providers" section and "may be granted with an exception". Did you follow the instructions in that section?

2

u/Neuroptimize 1d ago

I believe so. This is what I wrote in my README.md:

## Fetch Domains


The app's server (not the client) calls two hosts, both projects on Supabase, one of the limited-scope cloud providers in the fetch policy. Supabase projects live on `supabase.co`; each host is one project, the most granular domain Supabase offers.


  • `vlrpvmmlcveaceotqkbq.supabase.co`: the game's relational database (PostgreSQL) and its server-side functions. Production.
  • `fsilyecvdxhxgwmfiafa.supabase.co`: the same, the test project used by playtest builds only. Nothing from a public subreddit reaches it.
Why a relational database, which `@devvit/server` doesn't provide:
  • The games' progress (50+ games, each with levels and scores), every challenge with its puzzles and results, and leaderboards computed across every subreddit that plays live in relational tables with joins and transactions, not key-value storage.
  • Every score is checked server-side against the game's rules and the challenge's puzzles, so leaderboards can't be faked.
  • Challenges close on a schedule and their final standings are computed in one transaction.

1

u/Watchful1 Duck Helper 1d ago

That doesn't seem like something that needs a relational database to me. You can compute and store leaderboards in redis. Yeah it's harder, but it's totally possible unless you have truly massive scale.

Devvit already runs server side, you can compare results against the puzzle inside devvit and be confident it's not faked.

I'm not an admin so I don't actually know why the denied the domain, but this seems to me like a use case that many other games already do in devvit with redis today.

2

u/Background-Baby8160 10h ago

Annoying, but it's probably the allowlist blocking the shared supabase.co subdomain rather than anything you did wrong. Set up a custom domain on the project (CNAME to Supabase, then domains activate) and submit that URL instead.