fix(security): restrict redirect wildcard to project namespace

EmiyaKiritsugu3 · EmiyaKiritsugu3 · commit 794f763a984b · 2026-07-08T09:09:03.000-03:00
https://smartmanagementsystem-*-emiyakiritsugu3s-projects.vercel.app/auth/callback

(was https://**.vercel.app/auth/callback — matched any Vercel deploy worldwide)
diff --git a/supabase/config.toml b/supabase/config.toml
@@ -155,7 +155,7 @@ site_url = "http://localhost:3000"
 # A list of *exact* URLs that auth providers are permitted to redirect to post authentication.
 additional_redirect_urls = [
   "http://localhost:3000/auth/callback",
-  "https://**.vercel.app/auth/callback",
+  "https://smartmanagementsystem-*-emiyakiritsugu3s-projects.vercel.app/auth/callback",
   "https://smartmanagementsystem.vercel.app/auth/callback"
 ]
 # How long tokens are valid for, in seconds. Defaults to 3600 (1 hour), maximum 604,800 (1 week).

Original file line number	Diff line number	Diff line change
`@@ -155,7 +155,7 @@ site_url = "http://localhost:3000"`
`155`	`155`	`# A list of exact URLs that auth providers are permitted to redirect to post authentication.`
`156`	`156`	`additional_redirect_urls = [`
`157`	`157`	`"http://localhost:3000/auth/callback",`
`158`		`- "https://**.vercel.app/auth/callback",`
	`158`	`+ "https://smartmanagementsystem-*-emiyakiritsugu3s-projects.vercel.app/auth/callback",`
`159`	`159`	`"https://smartmanagementsystem.vercel.app/auth/callback"`
`160`	`160`	`]`
`161`	`161`	`# How long tokens are valid for, in seconds. Defaults to 3600 (1 hour), maximum 604,800 (1 week).`