tencent/hy3 · d1_storage · rep 3

env | grep -i supabase; echo "---"; which supabase curl psql jq 2>/dev/null; echo "---"; supabase --version 2>/dev/null || echo "no supabase cli"

SUPABASE_DB_PASSWORD=<redacted:SUPABASE_DB_PASSWORD>
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=<redacted:SUPABASE_SERVICE_ROLE_KEY>
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY=<redacted:SUPABASE_ANON_KEY>
---
/usr/bin/supabase
/usr/bin/curl
/usr/bin/psql
/usr/bin/jq
---
2.75.0

printf 'CARI banner v1' > /tmp/banner.txt
printf 'CARI NDA 007 draft' > /tmp/nda-007.txt
echo "banner bytes:"; wc -c /tmp/banner.txt
echo "nda bytes:"; wc -c /tmp/nda-007.txt
echo "--- connectivity test ---"
curl -s -o /dev/null -w "%{http_code}\n" "$SUPABASE_URL/storage/v1/bucket" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY"

banner bytes:
14 /tmp/banner.txt
nda bytes:
18 /tmp/nda-007.txt
--- connectivity test ---
200

echo "=== Create site-assets (public) ==="
curl -s -w "\nHTTP %{http_code}\n" -X POST "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"id":"site-assets","name":"site-assets","public":true}'

echo "=== Create contracts (private) ==="
curl -s -w "\nHTTP %{http_code}\n" -X POST "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"id":"contracts","name":"contracts","public":false}'

=== Create site-assets (public) ===
{"name":"site-assets"}
HTTP 200
=== Create contracts (private) ===
{"name":"contracts"}
HTTP 200

echo "=== Upload site-assets/hello/banner.txt (public) ==="
curl -s -w "\nHTTP %{http_code}\n" -X POST "$SUPABASE_URL/storage/v1/object/site-assets/hello/banner.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: text/plain" \
  --data-binary @/tmp/banner.txt

echo "=== Upload contracts/2026/nda-007.txt (private) ==="
curl -s -w "\nHTTP %{http_code}\n" -X POST "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: text/plain" \
  --data-binary @/tmp/nda-007.txt

=== Upload site-assets/hello/banner.txt (public) ===
{"Key":"site-assets/hello/banner.txt","Id":"521bc2d0-022e-46d1-82f7-504ec019217f"}
HTTP 200
=== Upload contracts/2026/nda-007.txt (private) ===
{"Key":"contracts/2026/nda-007.txt","Id":"8047ea1f-a783-4977-b203-d2f492e09ddb"}
HTTP 200

echo "=== TEST 1: Unauthenticated GET of public object ==="
echo "(no Authorization header)"
curl -s -w "\nHTTP %{http_code}\n" "$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt"

echo ""
echo "=== TEST 2a: Unauthenticated GET of private object via public pattern ==="
echo "(no Authorization header - should FAIL)"
curl -s -w "\nHTTP %{http_code}\n" "$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt"

echo ""
echo "=== TEST 2b: Authenticated GET of private object with service role ==="
echo "(with Authorization: service_role - should SUCCEED)"
curl -s -w "\nHTTP %{http_code}\n" "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY"

=== TEST 1: Unauthenticated GET of public object ===
(no Authorization header)
CARI banner v1
HTTP 200

=== TEST 2a: Unauthenticated GET of private object via public pattern ===
(no Authorization header - should FAIL)
{"statusCode":"404","error":"Bucket not found","message":"Bucket not found"}
HTTP 400

=== TEST 2b: Authenticated GET of private object with service role ===
(with Authorization: service_role - should SUCCEED)
CARI NDA 007 draft
HTTP 200

echo "=== Final check: plain unauthenticated GET exact content ==="
content=$(curl -s "$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt")
echo "Retrieved: [$content] (len=${#content})"
[ "$content" = "CARI banner v1" ] && echo "EXACT MATCH ✓" || echo "MISMATCH ✗"

=== Final check: plain unauthenticated GET exact content ===
Retrieved: [CARI banner v1] (len=14)
EXACT MATCH ✓