Database / Supabase basics Interview Questions
How does Supabase auto-generate REST APIs from a database schema?
Supabase runs PostgREST, a standalone server that introspects your Postgres schema at startup and turns every table, view, and stored procedure into a REST resource on the fly — there's no code generation step or API definition file to maintain.
A table named posts with columns id, title, and published automatically becomes queryable at /rest/v1/posts, and query string parameters map directly to SQL: ?published=eq.true&order=id.desc becomes a WHERE clause and ORDER BY. Because PostgREST talks to Postgres as the authenticated user's role, Row Level Security is applied automatically on every generated endpoint, so the API layer never becomes a way to bypass your data access rules.
What server does Supabase use to auto-generate REST endpoints from a Postgres schema?
Why can't the auto-generated REST API be used to bypass Row Level Security?
More Related questions...
