Prisma

Single-Provider Auth for White-Label SaaS

A developer building VoiceDash, a white-label platform for agencies reselling AI voice agents, describes solving multi-tenant authentication by using one auth provider with a small discriminator field (`type` = "agency" or "client"). The approach bakes the discriminator into JWT sessions, enforces access via a single Next.js middleware gate, and avoids duplicating auth logic. The author also documents an edge-runtime gotcha: edge middleware cannot import Node-only libraries like bcrypt or Prisma, so the solution is to split configuration into an edge-safe auth.config.ts and a server-only auth.ts that includes database-dependent providers.

AI Agent Engineer Aniruddha Adak Profile

Aniruddha Adak, an AI agent engineer based in Kolkata and a Computer Science student at Budge Budge Institute of Technology (class of 2026), published a comprehensive personal profile on dev.to on 2026-07-24. The post details his skills across frontend, backend, and AI (including agent frameworks and RAG pipelines), lists active GitHub accounts and project work, highlights numerous merged open-source contributions and recent bug reports, and summarizes achievements such as shipping 27 AI applications in 45 days and high-volume posting activity on X. The article is a professional portfolio and roadmap outlining his current projects, tools, and where to find his work online.

Prisma and Drizzle bypass Supabase Row-Level Security

Prisma and Drizzle, when pointed at a Supabase project's DATABASE_URL, open direct PostgreSQL connections as the postgres role and therefore bypass Supabase Row-Level Security (RLS). On Supabase the postgres role typically owns migrated tables and has the BYPASSRLS attribute, so policies do not run for ORM queries. The Supabase JS/PostgREST path enforces RLS by running statements as unprivileged anon/authenticated roles. The article explains the mechanism, shows why FORCE ROW LEVEL SECURITY alone won't help if the connection role bypasses RLS, and gives three fixes: use supabase-js for user-facing data, set role and JWT claims inside transaction-scoped statements, or create a dedicated least-privileged login role without BYPASSRLS.