refactor(auth): extract AuthProvider interface and Supabase provider

↗ view on GitHub · Allen Morgan · 2026-05-08 · bfee639b

Provider-neutral AuthPrincipal + AuthValidationResult types in
auth/types.ts. Existing inline Supabase validation extracted to
auth/providers/supabase.ts. Middleware dispatches on AUTH_PROVIDER env
var, defaulting to 'supabase'; unknown values return 500.

Zero behaviour change when AUTH_PROVIDER is unset or 'supabase'.
Downstream routes still receive res.locals.userId / userEmail / token;
res.locals.principal is added as the canonical surface.
Repository Altien/mikeOssAzure
Author Allen Morgan <amorgan@altien.com>
Authored
Parents 45310480
Stats 3 files changed , +64 , -13
Part of Auth provider abstraction (Supabase / Entra / local HS256)

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-bfee639b.md from inside the repo you want the change in.

⬇ Download capture-commit-bfee639b.md