Supabase Storage
Supabase Storage is the file storage service embedded within the Supabase open-source backend platform, providing object storage with database-integrated access control and built-in image transformation capabilities. Unlike standalone cloud storage services, Supabase Storage is deeply connected to the Supabase PostgreSQL database and authentication system, enabling access control policies that reference the same user identities and database data as the rest of the application without separate permission management infrastructure.
The storage data model in Supabase uses buckets as top-level containers and objects as individual stored files within those buckets. Buckets can be configured as public (all objects are publicly accessible via URL) or private (access requires authentication and policy authorization). This per-bucket visibility setting covers the default access model, while Row Level Security (RLS) policies on the storage schema tables provide fine-grained per-object and per-path access control for private buckets.
Row Level Security integration is the defining technical characteristic of Supabase Storage's access control model. Rather than a separate permission system, Supabase Storage access is controlled by PostgreSQL RLS policies on the storage.objects table. This means access rules can reference any data in the PostgreSQL database — user roles, team memberships, subscription plans, content ownership — using the same SQL-based policy syntax used for all other RLS policies in a Supabase project. A single policy expression can restrict file access to the authenticated user who owns the file, members of a specific team, or users with specific subscription-granted permissions.
The Supabase Storage API exposes standard REST endpoints for file operations: upload (single and multipart for large files), download, list objects within a bucket or path prefix, copy, move, and delete. Presigned URLs with configurable expiration times are supported for both uploads and downloads, enabling applications to generate time-limited direct-access URLs for private files. The JavaScript client library, available as part of the @supabase/supabase-js package, wraps these REST operations into a convenient SDK that handles authentication header injection automatically using the current session from Supabase Auth.
Image transformation is built natively into Supabase Storage through the Transform API. Images stored in Supabase Storage can be resized, reformatted, and quality-adjusted by appending transform parameters to the image URL. A product image stored at its original resolution can be requested at a specified width and height, automatically cropped or scaled by Supabase Storage's transform service, without pre-generating multiple image variants at upload time. Format conversion to WebP for modern browsers is supported, reducing image payload size for Nigerian users on mobile data connections.
Supabase Storage is backed by S3-compatible object storage, either Supabase's managed cloud infrastructure or a self-hosted MinIO or compatible storage backend when self-hosting Supabase. This architecture means that stored objects are durable and the Supabase Storage API layer handles authentication, policy evaluation, and transformation while the underlying storage provides the object persistence layer.
For Nigerian developers building applications with Supabase as their backend, Storage is the natural file storage choice because it shares authentication state with Supabase Auth. When a user is signed in through Supabase Auth, the same JWT token that authorizes database queries also authorizes Storage operations — there is no separate file storage authentication flow to implement. This unified auth model significantly reduces the complexity of building file upload features into Supabase-backed applications.
Common use cases for Nigerian Supabase projects include profile photo and avatar storage for social apps, document upload for KYC and verification workflows in fintech applications, media upload for content-sharing platforms, and attachment storage for productivity and communication tools. The combination of integrated auth, database-connected RLS policies, and image transformation makes Supabase Storage a complete file management solution that eliminates the need for integrating separate storage, CDN, and image processing services for most application needs.