Supabase Storage: Server-Side File Encryption + Auth/RLS Integration (Pair-Work Support)

I’m building a system where authenticated users upload documents and images. Files must be encrypted on the server, stored in Supabase Storage as encrypted blobs, and decrypted only for authorised users. I already use Supabase Auth (sign-in + roles), and your solution must plug directly into that flow.

I also need someone who can work with me in a help-desk / live support style (pair-programming, screenshare, short sessions) to implement, debug, and harden the system together.

What I need

Server-side encryption pipeline on upload (AES-256)

Secure key management (no secrets exposed to the client)

Storage rules + RLS tied to Supabase Auth (owner/roles access)

Support for documents (PDF/DOCX) and images (PNG/JPEG/WebP), easy to extend

Clean code + brief deployment notes

Short README: upload/list/download/decrypt via REST and Supabase client libraries

Acceptance Criteria

Upload from an authenticated session stores only an encrypted object in Storage

Unauthorised access returns access denied

Authorised retrieval decrypts correctly with integrity verification

No common security issues (hard-coded keys, IV reuse, bad CORS, etc.)

Budget & Timeline
Open to discussion. I prioritise quality, security, and clear communication.