Cloudflare Pages + Functions

Safe Event Receiver

A demo API that records event metadata in Supabase with available IP-based location estimates. Passwords, cookies, tokens, and other credentials are rejected.

Test with curl

Run this from your terminal after configuring Supabase in .dev.vars.

curl -X POST http://127.0.0.1:8788/api/events \
  -H "Content-Type: application/json" \
  -d '{"event":"signup_test","message":"Hello from my app","source":"local-demo"}'

Important

• Do not send passwords, cookies, tokens, or private data.
• Keep your Supabase service-role key in backend configuration.
• Store secrets in .dev.vars locally and Cloudflare secrets in production.