Ah yep,

supabase.auth.setAuth(token)

is exactly what I needed, works great. No need to use the service key

setAuth(user's jwt) works for me too at the web client side. Small issue for me is that I still need to call createClient() with anon key. Realtime does not work if I call createClient() directly with user's jwt. I am trying not to give anon key to web client.

cant insert data if "preventDefault()" is defined

js
function sendMessage(e) {
    e.preventDefault()
    supabase.from("messages").insert([{name: user.user_metadata.name, message: input}])
  }

hello ! I don"t understand well how to use the bucket... How to find the path of the file , how to upload the right path... Spend hours looking for a guide on the web, but didn"t found something clear... Maybe i imagine for something they are not made for .... Any help is appreciated 🙂

E.g. Upload a file from js web client:

const { data, error } = await supabase.storage
     .from("your bucket")
     .upload(
       "any path/u like/" + file.name,
       file,
       {
         cacheControl: "0",
         upsert: true,
       }
     );

The path+filename is essentially a unique key (string). You can choose any path+filename as u like. https://supabase.com/docs/reference/javascript/storage-from-upload

thanks for your help, i'll have a look 🙂

another question 😉 Bucket are available publicly ? Is it possible to store files publicly accessible ?

Private by default, u can set to public in the dashboard. https://supabase.com/blog/2021/07/27/storage-beta

thank you, and could you tell what the public path look like ?

many infos on the page you shared , thanks

U can call the getPublicUrl: https://supabase.com/docs/reference/dart/storage-from-getpublicurl It looks like this:

thank you very much !!!!! 😉

How can I disallow any read or writes on a table using RLS but still allow a function to return a value from that table? I want to restrict reads to being read only through a function but if I turn on RLS with just a

false

policy it fails the function as well.

That sounds like a slightly dangerous approach to security

Peep the thread I explained myself a little more. I agree, it is sketch but if you have a suggestion for how I could do it I’d love to hear it

Hi I am trying to use these apis in curl and they do not seem to work, only creating a bucket works and get buckets returns an empty array Are there some required headers that are missing from this swagger spec? https://supabase.github.io/storage-api/#/

i am working on a package for ios for supabase

I'm one of the contributors on this repo and the other sub-repos, take a look at these!

the repo for storage specifically: https://github.com/supabase-community/storage-swift

sorry but this package does not include auth or storage my package is only missing storage

It actually does! It includes Auth, Realtime, Storage and Postgrest as submodules

You can include supabase-swift in your package.swift and it'll automatically add the other dependencies

oh the documentation does not reflect it

but it still does not answer why the storage API does not work in postman

Ah that's what the examples are supposed to reflect. I'll see if I can add a quick explainer that they add the other modules as dependencies similar to the js library.

I can't answer that tho I haven't worked with the storage API so sorry, I'm sure someone else will be able to help

curl --location --request GET 'https://mysupabaseurl.com/storage/v1/bucket/' \ --header 'Accept: application/json' \ --header 'Authorization: Bearer jwt here' \ --data-raw '' this returns an empty array when it is supposed to return a list of buckets which it does not.

I am using this as a reference: https://supabase.github.io/storage-api/

when using the supabase CLI to run my project locally, and using magic link for auth, how do I get the link to login? previously it was available at a different URL. (i think localhost:9000)