3 replies

Can anyone access data with CONVEX_URL without authentication setup?

Hi, I have a newbie question. I just started a Node.js project following the "Node.js Quickstart" guide. When exposing a database query like this, without any authentication restrictions, does this mean anyone can access the data if they know the CONVEX_URL?

import { query } from "./_generated/server";

export const get = query({
  args: {},
  handler: async (ctx) => {
    return await ctx.db.query("tasks").collect();
  },
});

import { query } from "./_generated/server";

export const get = query({
  args: {},
  handler: async (ctx) => {
    return await ctx.db.query("tasks").collect();
  },
});

Can anyone access data with CONVEX_URL without authentication setup?

Similar Threads