# Supabase

To verify a Supabase domain for a pentest, complete the steps below.

{% stepper %}
{% step %}

#### Start the verification process

Go to the final step of the pentest onboarding flow, where you can configure domain verification.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FvBxrJiYdkyAJLVToooak%2Fimage.png?alt=media&#x26;token=765d5e11-e6c7-4fe7-83d3-0f817974dadb" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Click verify

Find your Supabase domain and click Verify. This starts the Supabase-specific verification flow.
{% endstep %}

{% step %}

#### Copy the verification code

Copy the verification code shown in Aikido. You will use this code to create the verification file in the next step.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2F4etO9SHoS73tE79lg04T%2Fimage.png?alt=media&#x26;token=0ec4cecd-1da7-4bf5-bd42-237dca392938" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Create a verification file

Create a local file named aikido.txt and add the verification code to it. You will upload this file in a later step.

```
echo validation.aikido.7b11e89f82e2119ef8889dce7078909a > aikido.txt
```

{% endstep %}

{% step %}

#### Create public bucket

To host the verification file, you need a public Supabase Storage bucket. If you do not already have one, create a new bucket and enable public access.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FP7qBbUqLkPDNBQ9zQM4j%2Fimage.png?alt=media&#x26;token=809bdcf3-3034-40e7-a53d-4ad6be1afca7" alt=""><figcaption></figcaption></figure>

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FG1gxPKI6jI7vXG1BPpba%2Fimage.png?alt=media&#x26;token=e3d4ea8a-3fe0-4931-82e0-0db2570a339c" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Upload verification file

Upload aikido.txt to the public bucket.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FzRN0aaKJp3IDl5aidQ4h%2Fimage.png?alt=media&#x26;token=46116367-d92c-4c84-98d1-a2a7f8fba2f3" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Get the url of the file

After the file has been uploaded, copy its public URL from Supabase Storage.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FYfN8GAxXFToJeJ67oOsm%2Fimage.png?alt=media&#x26;token=1b5c79c7-40f8-4cc6-9c6e-2765dc28e408" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Provide the url for validation

Paste the public file URL into the verification flow in Aikido and submit it for validation.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FR7fOTp38FHS357uDr035%2Fimage.png?alt=media&#x26;token=43a0e4c0-68d2-4eeb-908a-0c7cf3913904" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

#### Succesful validation

If the validation succeeds, you will see a confirmation toast in Aikido.

<figure><img src="https://3149773201-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FyKbzcQGrx7UtrG0nPZZ7%2Fuploads%2FqziulAayF2M5bz4LQoSE%2Fimage.png?alt=media&#x26;token=2c1c8d2f-b4f6-4845-a56b-ed41e709766c" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}
