Fixes for Replit apps
OpenAI / Stripe secret key leaked in the browser
LovableBoltv0ReplitCursorEnv vars & leaked keys
sk-... or sk_live_... visible in DevTools network tab or page sourceLovableBoltv0ReplitCursorEnv vars & leaked keys
Error 400: redirect_uri_mismatch (Google sign-in)
CursorReplitBoltAuth
Error 400: redirect_uri_mismatch — The redirect URI in the request does not match the ones authorizedCursorReplitBoltAuth
Stripe webhook: No signatures found matching the expected signature
CursorBoltReplitv0Payments
StripeSignatureVerificationError: No signatures found matching the expected signature for payloadCursorBoltReplitv0Payments
CORS error: blocked by CORS policy: No 'Access-Control-Allow-Origin' header
CursorReplitBoltv0Deploys
Access to fetch at 'https://api...' from origin 'https://...' has been blocked by CORS policyCursorReplitBoltv0Deploys
Replit deploy: app not reachable / port not open
ReplitDeploys
Your app is not listening on the expected port / deployment health check failedReplitDeploys
Postgres: too many connections / remaining connection slots are reserved
Cursorv0ReplitPerformance
FATAL: sorry, too many clients already / remaining connection slots are reservedCursorv0ReplitPerformance
OpenAI 429 'You exceeded your current quota' or a surprise AI bill
CursorReplitBoltLovableEnv vars & leaked keys
429: You exceeded your current quota, please check your plan and billing detailsCursorReplitBoltLovableEnv vars & leaked keys
.env file committed to GitHub
CursorReplitBoltEnv vars & leaked keys
GitHub secret scanning alert / .env visible in a public repoCursorReplitBoltEnv vars & leaked keys
Supabase "permission denied for table" (42501) on a new table
LovableBoltCursorv0ReplitDatabase / Supabase RLS
{"code":"42501","message":"permission denied for table your_table","hint":"Grant the required privileges to thLovableBoltCursorv0ReplitDatabase / Supabase RLS