supabase-android

To fix UnauthorizedRestException in your Android app, enable Row Level Security on your Supabase tables and ensure you pass a valid user JWT with your Postgrest queries. Avoid using the service role key on the client side.

The best way to manage Supabase authentication sessions in Kotlin is by observing the sessionStatus Flow. This allows your Android app to reactively track user login states across email/password, Google OAuth, and phone OTP logins.

To set up Supabase Kotlin SDK dependencies, configure the Bill of Materials (BOM) for version alignment, apply the Kotlin serialization plugin, and use Hilt for dependency injection. This creates a structured, maintainable Android environment.

Yes, you can invoke Supabase Edge Functions from Android with proper JWT passthrough. You must manage the verify_jwt considerations on your backend and ensure the Kotlin client securely forwards the authenticated user token.

You map Supabase Postgrest database queries to Kotlin by using @Serializable Data Transfer Objects. Apply the decodeList or decodeSingle patterns to accurately deserialize the JSON responses into typed Kotlin objects.

To handle Supabase storage file uploads in Android, implement private and public URL handling while scoping file paths with unique user IDs. This ensures secure data isolation and prevents unauthorized access to user files.