Tyler Posts - Answer Overflow

Tyler

•Created by Tyler on 3/28/2025 in #help

Non-escape character breaks select function

One of my users has an apostrophe in their name ex: Ty'ler Marshall. They are just using out of the box Supabase email provider magic link functionality with a gmail address. The raw_user_meta_data column is storing their name like:

{
  "sub": "3ecc77d1-0dd178e7206d",
  "name": "Ty'ler Marshall",
  "email": "[email protected]",
  "email_verified": true,
  "phone_verified": false
}

{
  "sub": "3ecc77d1-0dd178e7206d",
  "name": "Ty'ler Marshall",
  "email": "[email protected]",
  "email_verified": true,
  "phone_verified": false
}

I then have a call on my front-end that is using Drizzle as ORM which is a pretty simple select:

    const results = await authDb(session, (tx) => {
      return tx.select().from(appUsers).where(eq(appUsers.user_id, user.id));
    });

    const results = await authDb(session, (tx) => {
      return tx.select().from(appUsers).where(eq(appUsers.user_id, user.id));
    });

But this is failing because its not being escaped. The value in DB is not escaped: Error getting user data Error: syntax error at or near "ler" The appUsers table doesn't even reference that col at all:

export const appUsers = pgTable('app_users', {
  id: bigint('id', { mode: 'number' })
    .generatedByDefaultAsIdentity()
    .primaryKey(),
  user_id: uuid('user_id')
    .references(() => authUsers.id, { onDelete: 'cascade' })
    .notNull(),
  phone: varchar('phone'),
  email: varchar('email'),
  phone_number_consented: boolean('phone_number_consented')
    .notNull()
    .default(false),
  email_consented: boolean('email_consented').notNull().default(false),
  created_at: timestamp('created_at').notNull().defaultNow(),
  updated_at: timestamp('updated_at').notNull().defaultNow(),
  user_initial_onboarding_complete: boolean('user_initial_onboarding_complete')
    .notNull()
    .default(false),
});

export const appUsers = pgTable('app_users', {
  id: bigint('id', { mode: 'number' })
    .generatedByDefaultAsIdentity()
    .primaryKey(),
  user_id: uuid('user_id')
    .references(() => authUsers.id, { onDelete: 'cascade' })
    .notNull(),
  phone: varchar('phone'),
  email: varchar('email'),
  phone_number_consented: boolean('phone_number_consented')
    .notNull()
    .default(false),
  email_consented: boolean('email_consented').notNull().default(false),
  created_at: timestamp('created_at').notNull().defaultNow(),
  updated_at: timestamp('updated_at').notNull().defaultNow(),
  user_initial_onboarding_complete: boolean('user_initial_onboarding_complete')
    .notNull()
    .default(false),
});

If I do this:

    const results = await db
      .select()
      .from(appUsers)
      .where(eq(appUsers.user_id, user.id));

    const results = await db
      .select()
      .from(appUsers)
      .where(eq(appUsers.user_id, user.id));

it works fine, does the tx.select() do some sort of full lookup in the auth users table that grabs all the info? I am not sure if this is a supabase, google, or drizzle situation. Any thoughts?

4 replies

Gaming

Programming