FilesExpand file tree

develop

/

postgrest.sh

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

executable file

·

66 lines (60 loc) · 1.9 KB

develop

/

postgrest.sh

Copy path

Top

File metadata and controls

• Code
• Blame

executable file

·

66 lines (60 loc) · 1.9 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

#!/bin/bash

set -eou pipefail

# 0. Create test table with RLS

# supabase --workdir tests migrations up

# 1. Create todo as service role

output=$(curl -sS "$API_URL/rest/v1/todos" \

-H "apikey: $SECRET_KEY" \

-H 'Content-Type: application/json' \

-H 'Prefer: return=representation' \

-d '{"task": "New task", "done": false}' \

)

if [[ $(echo "$output" | jq -r 'length') != '1' ]]; then

echo 'Creating todo as service role should succeed.' >&2

echo "$output" | jq

exit 1

fi

# 2. Create todo as anon role should fail

output=$(curl -sS "$API_URL/rest/v1/todos" \

-H "apikey: $PUBLISHABLE_KEY" \

-H 'Content-Type: application/json' \

-d '{"task": "New task", "done": false}' \

)

if [[ $(echo "$output" | jq -r '.code') != '42501' ]]; then

echo 'Creating todo as anon role should fail.' >&2

echo "$output" | jq

exit 1

fi

# 3. List todos as anon role

output=$(curl -sS -G "$API_URL/rest/v1/todos" \

-H "apikey: $PUBLISHABLE_KEY" \

-H 'Content-Type: application/json' \

)

if [[ $(echo "$output" | jq -r 'length') != '1' ]]; then

echo 'Listing todos as anon role should succeed.' >&2

echo "$output" | jq

exit 1

fi

# 4. Delete todo as anon role should fail

output=$(curl -sS -X DELETE "$API_URL/rest/v1/todos?id=eq.1" \

-H "apikey: $PUBLISHABLE_KEY" \

-H 'Content-Type: application/json' \

-H 'Prefer: return=representation' \

)

if [[ $(echo "$output" | jq -r 'length') != '0' ]]; then

echo 'Deleting todo as anon role should fail.' >&2

echo "$output" | jq

exit 1

fi

# 5. Delete todo as authenticated role (custom jwt)

output=$(curl -sS -X DELETE "$API_URL/rest/v1/todos?id=not.eq.0" \

-H "apikey: $PUBLISHABLE_KEY" \

-H "Authorization: Bearer $SERVICE_ROLE_KEY" \

-H 'Content-Type: application/json' \

-H 'Prefer: return=representation' \

)

if [[ $(echo "$output" | jq -r 'length') != '1' ]]; then

echo 'Deleting todo as authenticated role should succeed.' >&2

echo "$output" | jq

exit 1

fi