Fix it
The errors that show up right after you move an AI-built app to real hosting, with exact fixes from official docs.
- Supabase table without Row Level Security Supabase warns “RLS disabled” — your table is public
- Insert/update blocked by RLS “new row violates row-level security policy” (42501)
- SPA routes 404 on refresh/direct link Page works, but refreshing it gives a 404
- Environment variables missing after export Blank page or “supabaseUrl is required” after moving off the builder
- OAuth redirect URL mismatch Google login sends you back to localhost (or “redirect_uri_mismatch”)
- Wrong build command or output directory Deploy succeeds but shows a blank page or “Page not found”
- Firebase Auth unauthorized domain Firebase: “This domain is not authorized for OAuth operations”
- Clerk development keys in production Clerk: “Development keys” warning or sign-in broken in production