supabase for authentication and Cloudflare (tentative) for storage

A high-performance stack pairing Supabase Auth for identity management with Cloudflare R2 for cost-effective, egress-free object storage.

This architecture leverages Supabase to handle GoTrue-based authentication (JWTs, MFA, and social logins) while offloading heavy assets to Cloudflare R2. By using R2 instead of Supabase's native S3 wrapper, you eliminate egress fees and utilize Cloudflare's global edge network for lower latency. Implementation involves securing R2 buckets via Worker-based middleware or pre-signed URLs validated against Supabase user IDs. It is a battle-tested setup for teams scaling past 100GB of storage who require granular access control without the AWS data transfer tax.

https://supabase.com/docs/guides/auth