# Security Tuneup

> :::warning Idea note

# Security Tuneup

:::warning Idea note

This page is an unfinished checklist and does not fully reflect the current Supacharger Core security model. Use [Authentication and route protection](../Application%20Development/authentication.md), [Roles and custom claims](../Application%20Development/roles-and-custom-claims.md), [Input validation](../Application%20Development/input-validation.md), and [Deploy and production readiness](../Application%20Development/deploy.md) as the maintained references.

:::

RLS policies

How to set up cloudflare

Rate limiting

test with postman

Setting timeouts and enforcing only one session
https://supabase.com/dashboard/project/XXX/auth/sessions

Email password settings
https://supabase.com/dashboard/project/XXX/auth/providers?provider=Email