Keyboard shortcuts

jk
move through the list
↵
open the selected item
a
ask a question
nucw
tabs: new, unanswered, active, top
⌘↵
post the answer you are writing
/or⌘K
search
t
switch theme
?
this list
AskVibe
AskSign in
Demo, all content is generated
Review request

Wedding photography booking page from v0, are my client galleries public?

Open · 65 views · asked by yuki_builds · edited
v0nextjssupabasesecurity

Repo or live app

studio-sato.vercel.app ↗

Unsure about: Security

Couples book a shoot and later get a private gallery link. v0 generated the upload flow and put everything in a Supabase Storage bucket called galleries, one folder per booking. The links are long random strings, which felt safe enough at the time. I would like someone to tell me whether that is actually private or just hard to guess.

Comment
Is the bucket marked public? If so, the long string is the only protection, and links get forwarded. Private bucket plus signed URLs is the usual answer. lena_ops · edited

Activity

3 helpers notified

Related

Cursor fixed my RLS errors by adding NEXT_PUBLIC_SUPABASE_SERVICE_ROLE_KEY, is that ok?solved
next/image with Supabase storage url: hostname is not configured under imagessolved
My service role key was in a public repo for 3 weeks, what do I do first?3 ans.
Internal wiki search shows pages from other teams, filter runs in the browser2 ans.
Supabase logs show every product page query running twice (generateMetadata + page)solved

Your answer

Sign in to write an answer