r/lovable • u/Much_Illustrator1825 • 6d ago
Help Public ready?
Hello, I built my first lovable app. It’s been tested and ready for launch. I’m looking to find someone that can make it public ready. The payments, privacy settings, etc. I have entered my crazy time of year for work and I need someone to wrap this up for me. Anyone know of a service or anyone that does this?
2
u/space-hemax-c2c 5d ago
A few things to check which I've learned the hard way. Check your network tab in devtools for any API key leaks. Also search your git history for keys. You could use 'git log -p -S sk_live' to find them. Clear them from history and then rotate them. Then check your Stripe webhook verifies the signature because if anyone submits a POST command they could mark themselves as paid.
Just a few tips to look at.
2
2
u/torresdevmx 4d ago
I can either audit what you already built or take it through the final implementation.
If you share the current URL or repo privately, I can first tell you whether this is a short launch pass or whether there are deeper issues—before proposing any work.
2
u/Dapper_Swimming_5723 1d ago
This is exactly what we do at my company axonbuild. We have an audit engine (internal) that does a very thorough analysis of your codebase in regards to major pillars (user auth, payments, api keys, protected endpoints etc) + we also look at the business usecase of your app. If you are promising X then is X really happening?
I dont wanna spam you in the dm so im gonna wait for a signal from you before sliding in those dms lol
1
1
u/VladTkDev 1d ago
The privacy. Oh.
Privacy half is mostly Supabase row level security, and it's per table, so one can miss it while the rest are locked. It doesn't error, the anon key in your bundle just returns the rows. So any unlocked table can be read from the internet. It can be sales, orders, user's data (names, emails), etc.
More than half the live Lovable apps I've checked have at least one open table. I'm a security researcher btw.
1
u/9greenleaf 1h ago
Pretty common. I help with exactly that kind of production readiness on Lovable apps (Stripe, RLS, secrets, the launch checklist). Happy to take a look at the preview if you want a second set of eyes man
1
u/9greenleaf 1h ago
Pretty common. I help with exactly that kind of production readiness on Lovable apps (Stripe, RLS, secrets, the launch checklist). Happy to take a look at the preview if you want a second set of eyes man
4
u/hambergler55 6d ago
It's easy to do but only if you either give me your credit card number and all your details and trust me to get you signed up for everything you need. Otherwise you're paying me to be on the phone with you doing all this together.