Supabase with row-level security
Context
A solo-maintained store needed authentication, product data, and order rules without a long custom backend setup before the first sale.
Alternatives
- Custom API with managed Postgres: more control, but much more setup before launch.
- Firebase documents: faster to start, weaker relational constraints for pricing, inventory, and order history.
Decision
PostgreSQL through Supabase with row-level security, keeping product and order rules next to the data.
Trade-off
Less control over the server process in exchange for shipping a secure storefront sooner.