Fixes for Lovable apps
Supabase query returns an empty array (no error)
LovableBoltv0Database / Supabase RLS
data: [] — select works in the SQL editor but returns nothing in the appLovableBoltv0Database / Supabase RLS
new row violates row-level security policy for table
LovableBoltCursorDatabase / Supabase RLS
new row violates row-level security policy for table "profiles" (code 42501)LovableBoltCursorDatabase / Supabase RLS
Supabase service_role key exposed in frontend code
LovableBoltv0CursorEnv vars & leaked keys
service_role key found in the JS bundle / NEXT_PUBLIC_SUPABASE_SERVICE_ROLE_KEYLovableBoltv0CursorEnv vars & leaked keys
OpenAI / Stripe secret key leaked in the browser
LovableBoltv0ReplitCursorEnv vars & leaked keys
sk-... or sk_live_... visible in DevTools network tab or page sourceLovableBoltv0ReplitCursorEnv vars & leaked keys
Magic link / OAuth login redirects to localhost:3000
LovableBoltv0CursorAuth
After clicking the email link or Google login, the browser opens http://localhost:3000LovableBoltv0CursorAuth
User is logged out after page refresh
LovableBoltv0Auth
After reload, user is null and protected pages redirect to /loginLovableBoltv0Auth
Payment succeeds but the user isn't upgraded
LovableBoltCursorPayments
Stripe shows the payment as succeeded but the app still shows the free planLovableBoltCursorPayments
No such price / No such customer (test vs live mode mix-up)
CursorBoltv0LovablePayments
StripeInvalidRequestError: No such price: 'price_...'CursorBoltv0LovablePayments
404 NOT_FOUND when refreshing a page (React/Vite SPA)
LovableBoltDeploys
404: NOT_FOUND on /dashboard after refresh or when opening a direct linkLovableBoltDeploys
Supabase Edge Function fails with CORS or 'Failed to send a request'
LovableBoltDatabase / Supabase RLS
FunctionsFetchError: Failed to send a request to the Edge Function / CORS preflight failedLovableBoltDatabase / Supabase RLS
App is slow: dozens of database calls per page (N+1 queries)
LovableBoltCursorv0Performance
Page takes 3–10s; network tab shows many identical requestsLovableBoltCursorv0Performance
Too many re-renders / useEffect infinite loop
LovableBoltv0CursorPerformance
Error: Too many re-renders. React limits the number of renders / Maximum update depth exceededLovableBoltv0CursorPerformance
Supabase Storage upload fails: new row violates row-level security policy (403)
LovableBoltv0Database / Supabase RLS
StorageApiError: new row violates row-level security policy (403 Unauthorized)LovableBoltv0Database / Supabase RLS
OpenAI 429 'You exceeded your current quota' or a surprise AI bill
CursorReplitBoltLovableEnv vars & leaked keys
429: You exceeded your current quota, please check your plan and billing detailsCursorReplitBoltLovableEnv vars & leaked keys
Postgres error: relation "public.xyz" does not exist
LovableBoltCursorv0Database / Supabase RLS
ERROR: 42P01: relation "public.profiles" does not exist / PostgREST could not find the tableLovableBoltCursorv0Database / Supabase RLS
Supabase "permission denied for table" (42501) on a new table
LovableBoltCursorv0ReplitDatabase / Supabase RLS
{"code":"42501","message":"permission denied for table your_table","hint":"Grant the required privileges to thLovableBoltCursorv0ReplitDatabase / Supabase RLS