open-legal-products tightens Mike's credential boundaries

Mike now catches missing backend data-service credentials early, while making clear that privileged keys do not belong in the browser.

securityinfrastructure

The maintainers have cleaned up how Mike handles its connection to its hosted data platform. If the backend is missing the address or privileged service credential it needs, it now stops with a clear error instead of proceeding with an unusable setup.

Just as importantly, the frontend setup guidance no longer suggests that a high-privilege service key should be supplied to the browser-facing application. That reduces the chance of teams exposing credentials that can bypass ordinary access controls while configuring a deployment.

So what Legal teams and product owners running Mike should care because safer defaults make deployment mistakes easier to spot and sensitive access keys less likely to leak.

View this fork on GitHub →

Spotted something wrong? Or know the PR text has fresher detail than the writeup above?

Commits in this thread

5 commits from open-legal-products/mike, oldest first. Source extracted verbatim from the harvested git log.

SHA Subject Author Date
9749d601 fix: enforce SUPABASE_URL and SUPABASE_SECRET_KEY presence in server-side client; remove unused supabase-server.ts file willchen96 2026-05-16 ↗ GitHub
4ba4d53c Merge pull request #138 from willchen96/supabase-env-cleanup cosimoastrada 2026-05-16 ↗ GitHub
fix: enforce SUPABASE_URL and SUPABASE_SECRET_KEY presence in server-side client; remove unused supabase-server.ts file
a8cf33ae Remove unused Supabase request auth helper mahaprasad nanda 2026-06-19 ↗ GitHub
80d14b86 test: drop mocks of removed getUserIdFromRequest helper willchen96 2026-07-26 ↗ GitHub
commit body
The integration tests landed on main after this branch was cut and
mocked the helper this PR deletes. Vitest factory mocks don't validate
against the real module shape, so the extra key was harmless but
misleading.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
416b32b1 Merge pull request #186 from user-in-search-of-a-name/codex/remove-dead-supabase-auth-helper Will Chen 2026-07-26 ↗ GitHub
[codex] Remove unused Supabase request auth helper

Capture this thread into my fork

Download a single Markdown prompt that tells Claude how to port every commit above into your working tree — adapting paths and structure to match your repo. Run it via claude -p < capture-thread-708.md from inside the repo you want the changes in.

⬇ Download capture-thread-708.md