xiaomi/mimo-v2.5 · d1_crud · rep 2

echo "SUPABASE_URL=$SUPABASE_URL"
echo "SUPABASE_PROJECT_REF=$SUPABASE_PROJECT_REF"
echo "SUPABASE_ANON_KEY length=$(echo -n "$SUPABASE_ANON_KEY" | wc -c)"
echo "SUPABASE_SERVICE_ROLE_KEY length=$(echo -n "$SUPABASE_SERVICE_ROLE_KEY" | wc -c)"
echo "SUPABASE_DB_URL=$SUPABASE_DB_URL"

SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY length=208
SUPABASE_SERVICE_ROLE_KEY length=219
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>

PGPASSWORD="$SUPABASE_DB_PASSWORD" psql "$SUPABASE_DB_URL" <<'SQL'
-- Create table
CREATE TABLE IF NOT EXISTS public.products (
  sku   text PRIMARY KEY,
  name  text NOT NULL,
  price_cents integer NOT NULL,
  stock integer NOT NULL DEFAULT 0
);

-- Insert rows (use ON CONFLICT to be safe on re-runs)
INSERT INTO public.products (sku, name, price_cents, stock) VALUES
  ('CARI-001', 'Anvil S',  1999, 12),
  ('CARI-002', 'Anvil M',  2999,  7),
  ('CARI-003', 'Anvil L',  4999,  3),
  ('CARI-004', 'Rope 30m', 1250, 40),
  ('CARI-005', 'Pulley',    780,  0)
ON CONFLICT (sku) DO UPDATE
  SET name = EXCLUDED.name,
      price_cents = EXCLUDED.price_cents,
      stock = EXCLUDED.stock;

-- Confirm
SELECT * FROM public.products ORDER BY sku;
SQL

CREATE TABLE
INSERT 0 5
   sku    |   name   | price_cents | stock 
----------+----------+-------------+-------
 CARI-001 | Anvil S  |        1999 |    12
 CARI-002 | Anvil M  |        2999 |     7
 CARI-003 | Anvil L  |        4999 |     3
 CARI-004 | Rope 30m |        1250 |    40
 CARI-005 | Pulley   |         780 |     0
(5 rows)

PGPASSWORD="$SUPABASE_DB_PASSWORD" psql "$SUPABASE_DB_URL" <<'SQL'
-- Grant SELECT to anon so the REST API can read
GRANT SELECT ON public.products TO anon;

-- Enable RLS with a permissive read policy for anon
ALTER TABLE public.products ENABLE ROW LEVEL SECURITY;

CREATE POLICY "Public read access" ON public.products
  FOR SELECT
  TO anon
  USING (true);
SQL

GRANT
ALTER TABLE
CREATE POLICY

# Test read with anon key only
curl -s "$SUPABASE_URL/rest/v1/products?select=*&order=sku" \
  -H "apikey: $SUPABASE_ANON_KEY" \
  -H "Authorization: Bearer $SUPABASE_ANON_KEY" | python3 -m json.tool

[
    {
        "sku": "CARI-001",
        "name": "Anvil S",
        "price_cents": 1999,
        "stock": 12
    },
    {
        "sku": "CARI-002",
        "name": "Anvil M",
        "price_cents": 2999,
        "stock": 7
    },
    {
        "sku": "CARI-003",
        "name": "Anvil L",
        "price_cents": 4999,
        "stock": 3
    },
    {
        "sku": "CARI-004",
        "name": "Rope 30m",
        "price_cents": 1250,
        "stock": 40
    },
    {
        "sku": "CARI-005",
        "name": "Pulley",
        "price_cents": 780,
        "stock": 0
    }
]