Supabase domain verification

To verify a Supabase domain for a pentest, complete the steps below.

1. 1

   Start the verification process

   Go to the final step of the pentest onboarding flow, where you can configure domain verification.

   

2. 2

   Click verify

   Find your Supabase domain and click Verify. This starts the Supabase-specific verification flow.

3. 3

   Copy the verification code

   Copy the verification code shown in Aikido. You will use this code to create the verification file in the next step.

   

4. 4

   Create a verification file

   Create a local file named aikido.txt and add the verification code to it. You will upload this file in a later step.

   echo validation.aikido.7b11e89f82e2119ef8889dce7078909a > aikido.txt

5. 5

   Create public bucket

   To host the verification file, you need a public Supabase Storage bucket. If you do not already have one, create a new bucket and enable public access.

   

   

6. 6

   Upload verification file

   Upload aikido.txt to the public bucket.

   

7. 7

   Get the url of the file

   After the file has been uploaded, copy its public URL from Supabase Storage.

   

8. 8

   Provide the url for validation

   Paste the public file URL into the verification flow in Aikido and submit it for validation.

   

9. 9

   Succesful validation

   If the validation succeeds, you will see a confirmation toast in Aikido.