apply_rate_hit

PostgREST stored procedure — POST /rest/v1/rpc/apply_rate_hit.

These are SECURITY DEFINER functions granted only to the service role (execute is revoked from anon/authenticated). They bypass table RLS and enforce their own company_id and status checks internally, so call them server-side with the service-role key:

const { data, error } = await supabase.rpc('apply_rate_hit', { p_ip_hash, p_limit, p_window_seconds });

Arguments

Argument	Type	Required
p_ip_hash	text	yes
p_limit	integer	yes
p_window_seconds	integer	yes

Generated from specs/supabase.json. The function's behaviour is defined by its SQL migration; this page documents its call signature only.