Test Supabase RLS Policies

import { createClient } from '@supabase/supabase-js';

const supabaseUrl = process.env.SUPABASE_URL!;
const supabaseAnonKey = process.env.SUPABASE_ANON_KEY!;

// Test with anonymous user (public access)
const anonClient = createClient(supabaseUrl, supabaseAnonKey);

// Test with authenticated user
const authClient = createClient(supabaseUrl, supabaseAnonKey);

async function testRLS() {
  console.log('🔐 Testing RLS Policies...\n');

  // Test 1: Anonymous read
  console.log('1️⃣ Testing anonymous read access...');
  const { data: anonData, error: anonError } = await anonClient
    .from('posts')
    .select('*');

  if (anonError) {
    console.error('❌ Anonymous read failed:', anonError.message);
  } else {
    console.log(`✅ Anonymous can read ${anonData.length} posts`);
  }

  // Test 2: Sign in and test auth read
  console.log('\n2️⃣ Testing authenticated read access...');
  const { data: authData } = await authClient.auth.signInWithPassword({
    email: '[email protected]',
    password: 'password123',
  });

  if (authData.user) {
    const { data: userPosts, error: userError } = await authClient
      .from('posts')
      .select('*');

    if (userError) {
      console.error('❌ Auth read failed:', userError.message);
    } else {
      console.log(`✅ Authenticated can read ${userPosts.length} posts`);
    }
  }

  // Test 3: Write access
  console.log('\n3️⃣ Testing write access...');
  const { error: writeError } = await authClient
    .from('posts')
    .insert({ title: 'Test Post', content: 'Test content' });

  if (writeError) {
    console.error('❌ Write failed:', writeError.message);
  } else {
    console.log('✅ Write succeeded');
  }

  // Test 4: Update own vs others
  console.log('\n4️⃣ Testing update policies...');
  const { error: updateError } = await authClient
    .from('posts')
    .update({ title: 'Updated' })
    .eq('author_id', authData.user?.id);

  if (updateError) {
    console.error('❌ Update own post failed:', updateError.message);
  } else {
    console.log('✅ Can update own posts');
  }

  // Clean up
  await authClient.auth.signOut();
  console.log('\n✅ RLS tests complete!');
}

testRLS().catch(console.error);