[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnzhkCddMHECT0IaZgUDCqsomJxaK1f9MewDOCkA3zqU":3},{"meta":4,"toc":21,"html":25,"hasMore":18,"views":9,"prev":26,"next":9,"seriesList":35},{"slug":5,"title":6,"description":7,"date":8,"updated":9,"tags":10,"series":14,"seriesOrder":15,"cover":9,"price":16,"priceUsd":17,"paid":18,"draft":19,"words":20,"minutes":15},"supabase-rls-security","Supabase RLS 安全模型：从入门到不翻车","行级安全策略的设计范式、常见漏洞模式，以及付费博客订单\u002F购买表的完整 RLS 实现。","2026-08-15",null,[11,12,13],"Supabase","Postgres","安全","数据库内功",2,19.9,2.99,true,false,718,[22],{"id":23,"text":24,"depth":15},"心智模型三条通道","心智模型：三条通道","\u003Cp>RLS（Row Level Security）是 Supabase 安全的最后一道防线，也是最容易写出漏洞的地方。这篇把设计范式、翻车模式和本站的完整实现讲透。\u003C\u002Fp>\n\u003Ch2 id=\"心智模型三条通道\">\u003Ca href=\"#心智模型三条通道\">心智模型：三条通道\u003C\u002Fa>\u003C\u002Fh2>\n\u003Cp>所有数据访问都走这三条通道之一，RLS 只作用前两条：\u003C\u002Fp>\n\u003Cpre class=\"shiki vesper\" style=\"background-color:#101010;color:#FFF\" tabindex=\"0\">\u003Ccode>\u003Cspan class=\"line\">\u003Cspan>┌─────────────────────────────────────────────┐\u003C\u002Fspan>\u003C\u002Fspan>\n\u003Cspan class=\"line\">\u003Cspan>│ anon key（浏览器、未登录）                      │\u003C\u002Fspan>\u003C\u002Fspan>\n\u003Cspan class=\"line\">\u003Cspan>│ authenticated key（浏览器、已登录用户 JWT）     │  ← RLS 管辖\u003C\u002Fspan>\u003C\u002Fspan>\n\u003Cspan class=\"line\">\u003Cspan>├─────────────────────────────────────────────┤\u003C\u002Fspan>\u003C\u002Fspan>\n\u003Cspan class=\"line\">\u003Cspan>│ service_role key（仅服务器，绕过 RLS）         │  ← 全能，绝不进前端\u003C\u002Fspan>\u003C\u002Fspan>\n\u003Cspan class=\"line\">\u003Cspan>└─────────────────────────────────────────────┘\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fcode>\u003C\u002Fpre>",{"slug":27,"title":28,"description":29,"date":30,"updated":9,"tags":31,"series":14,"seriesOrder":33,"cover":9,"price":16,"priceUsd":17,"paid":18,"draft":19,"words":34,"minutes":15},"postgres-index-internals","Postgres 索引原理：B+树、TOAST 与真实优化案例","从页结构到 B+ 树分裂，再到真实查询优化的完整路径，配合 Supabase 实战。","2026-08-12",[12,32,11],"数据库",1,836,[36,38],{"slug":27,"title":28,"description":29,"date":30,"updated":9,"tags":37,"series":14,"seriesOrder":33,"cover":9,"price":16,"priceUsd":17,"paid":18,"draft":19,"words":34,"minutes":15},[12,32,11],{"slug":5,"title":6,"description":7,"date":8,"updated":9,"tags":39,"series":14,"seriesOrder":15,"cover":9,"price":16,"priceUsd":17,"paid":18,"draft":19,"words":20,"minutes":15},[11,12,13]]