In local dev, resumable download URLs don't respect studio.api_url

[icopp]

Bug report

• I confirm this is a bug with Supabase, not with my own application.
• I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

When using a local setup with a reverse proxy or similar, and using resumable upload functionality, the generated resumable upload URLs ignore the studio.api_url value from config.toml.

To Reproduce

• Set up local Supabase dev environment with a reverse proxy (for example, proxy https://supabase.localhost to http://localhost:54321)
• Set studio.api_url in config.toml to your desired address (for example, https://supabase.localhost)
• Try to use a resumable upload. It will generate URLs with confused, nonfunctional hostnames/ports (for example, http://supabase.localhost:54321)

Expected behavior

Generated resumable upload URLs should be based on studio.api_url, the same as everything else (like signed image URLs, which work as expected).

Screenshots

n/a

System information

• OS: macOS
• Browser (if applies) n/a
• Version of supabase-js: 2.49.4
• Version of Node.js: 22.12.0

[lauri865]

I can confirm this. It used to work just fine, but suddenly things broke for us when we upgraded the CLI.

[lauri865]

Had to resort to a caddy rewrite to resolve this. Storage ignores "X-Forwarded-Port" if it's set to 443 or 80, so getting rid of the DEV port of :54321 is impossible in dev while support HTTPS. So, we end up with an url like "https://sb.local.test:54321/storage/v1...".

We found a hacky way to resolve it within our Caddyfile which configures our reverse proxy for local dev services:

header_down Location "^https://sb.local.test:54321/(.*)$" "https://sb.local.test/$1"