mirror of
https://github.com/supabase/supabase.git
synced 2026-09-07 02:20:52 +08:00
2a8dc75e3d
## I have read the [CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md) file. YES ## What kind of change does this PR introduce? docs update ## What is the current behavior? Storage RLS polices unintentionally allow list access to buckets potentially setting a bad example for people starting a new project. ## What is the new behavior? Use more restrictive RLS polices that only allow the intended operations <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Documentation** * Updated Supabase Storage access-control policies and examples across docs and starter projects. * Tightened avatar image access rules to require explicit operation checks for public reads. * Clarified guidance and added explanatory comments in migration and README examples to illustrate the updated access patterns. <!-- review_stack_entry_start --> [](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46172?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack) <!-- review_stack_entry_end --> <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Chris Chinchilla <chris.ward@supabase.io>
91 lines
2.6 KiB
Markdown
91 lines
2.6 KiB
Markdown
# Supabase Angular User Management
|
|
|
|
This example demonstrates how to build a user management app with Angular and Supabase.
|
|
|
|
## Features
|
|
|
|
- Magic link authentication (passwordless)
|
|
- User profile management
|
|
- Avatar upload with Supabase Storage
|
|
|
|
## Getting Started
|
|
|
|
### 1. Create a Supabase project
|
|
|
|
Create a new project in the [Supabase Dashboard](https://supabase.com/dashboard).
|
|
|
|
### 2. Set up the database
|
|
|
|
Run the following SQL in your Supabase SQL Editor to create the `profiles` table:
|
|
|
|
```sql
|
|
-- Create a table for public profiles
|
|
create table profiles (
|
|
id uuid references auth.users on delete cascade not null primary key,
|
|
updated_at timestamp with time zone,
|
|
username text unique,
|
|
avatar_url text,
|
|
website text,
|
|
|
|
constraint username_length check (char_length(username) >= 3)
|
|
);
|
|
|
|
-- Set up Row Level Security (RLS)
|
|
alter table profiles enable row level security;
|
|
|
|
create policy "Public profiles are viewable by everyone." on profiles
|
|
for select using (true);
|
|
|
|
create policy "Users can insert their own profile." on profiles
|
|
for insert with check ((select auth.uid()) = id);
|
|
|
|
create policy "Users can update own profile." on profiles
|
|
for update using ((select auth.uid()) = id);
|
|
|
|
-- Set up Storage
|
|
insert into storage.buckets (id, name)
|
|
values ('avatars', 'avatars');
|
|
|
|
-- Set up access controls for storage. Allows downloading object with public key
|
|
-- See https://supabase.com/docs/guides/storage/security/access-control#policy-examples for more details.
|
|
create policy "Avatar images are publicly accessible." on storage.objects
|
|
for select using (bucket_id = 'avatars' and storage.allow_any_operation(array['object.get_authenticated_info', 'object.get_authenticated']));
|
|
|
|
create policy "Anyone can upload an avatar." on storage.objects
|
|
for insert with check (bucket_id = 'avatars');
|
|
```
|
|
|
|
### 3. Configure environment variables
|
|
|
|
Update the `src/environments/environment.ts` file with your Supabase project URL and publishable key:
|
|
|
|
```typescript
|
|
export const environment = {
|
|
production: false,
|
|
supabaseUrl: 'YOUR_SUPABASE_URL',
|
|
supabasePublishableKey: 'YOUR_SUPABASE_PUBLISHABLE_KEY',
|
|
}
|
|
```
|
|
|
|
You can find these values in your Supabase project settings under API.
|
|
|
|
### 4. Install dependencies
|
|
|
|
```bash
|
|
npm install
|
|
```
|
|
|
|
### 5. Run the development server
|
|
|
|
```bash
|
|
npm start
|
|
```
|
|
|
|
Navigate to `http://localhost:4200/`. The application will automatically reload if you change any of the source files.
|
|
|
|
## Learn More
|
|
|
|
- [Supabase Documentation](https://supabase.com/docs)
|
|
- [Angular Documentation](https://angular.io/docs)
|
|
- [Supabase Angular Tutorial](https://supabase.com/docs/guides/getting-started/tutorials/with-angular)
|