Platform

Base44 breaks

Base44 breaks: a private app joined with only its public app id, a login token sent off-site, and tables open to all users. Checks are for your own app.

3 cards are tagged Base44. Symptoms in this set: Auth, Over-open rules. Open a card for the root cause, the fix prompt, and the self-check. The check is only for an app you own.

• Auth

  A private Base44 app could be joined with only its public app id

  The app was set to private, including SSO-only, and a registration still succeeded for someone who only knew the app id from the address bar.

• Auth

  A Base44 login could hand the account token to another site

  Signing in on Base44 could send the account token to a site you did not mean to visit, or into an app built on the platform.

• Over-open rules

  A Base44 table lets anyone read or change rows

  Orders, messages, or other private records are visible to every visitor, including people who are not signed in.