Validate real Supabase JWT in requireAuth middleware

↗ view on GitHub · clapointe-carbonleo · 2026-05-06 · fffe4396

Replaces hardcoded 'internal' userId with the actual Supabase user ID
extracted from the Bearer token sent by the frontend. Each user now has
their own isolated data in the database.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Repository clapointe-carbonleo/mike-legal
Author clapointe-carbonleo <clapointe@carbonleo.com>
Authored
Parents 2217a5df
Stats 1 file changed , +21 , -4
Part of Auth: stripped to a hardcoded "internal" user, then rebuilt on Supabase JWT

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-fffe4396.md from inside the repo you want the change in.

⬇ Download capture-commit-fffe4396.md