WixData .contains() method unknown limitations?

This is a last resort for me.

I am having trouble utilizing the backend as these blog posts are sensitive to our site members. As far as I’m away the http functions I can use for a backend API don’t support authentication. Which means I would have to open my database access to public. A work around I think would be to use CORS to validate that the request was coming from my site, but I think this still opens up a security vulnerability, if other members were smart enough to make a request to the API from another page.

I have no direct solution yet. I will be contacting technical support to see if they can give me an answer. The thing that I have discovered that is strange is that the Wix App “Site Search” actually supports running the exact query I am trying to run manually. It searches the plainContent field just fine. I just don’t want to be limited by having a dedicated search page, and would rather filter my posts repeater directly in page.