greptileai / supabase-mirror / 22875994484

73%

push

github

fix: add multi-object download signing for storage (#43576)

Bug fix

## What is the current behavior?

Read-only users cannot download files because the download feature
requires minting a temporary API key, which is properly blocked for
read-only users.

## What is the new behavior?

Instead of using temporary API keys, we now create signed URLs for the
files to be downloaded. We batch-create signed URLs for an entire
folder's worth of files, requiring only a single management API call,
then use those signed URLs to download the files. This allows read-only
users to download files without needing elevated permissions.

## Additional context

Resolves FE-2737

834 of 943 branches covered (88.44%)

Branch coverage included in aggregate %.

3079 of 4398 relevant lines covered (70.01%)

110.99 hits per line