https://supabase.com/docs/reference/javascript/storage-from-createsignedurl createSignedUrl is the way to get a storage file url with token for private buckets. You do need to allow select access RLS policy to get the signed url.