Skip to content

Commit 0f8f48a

Browse files
committed
fix(enrich): set verify_jwt=false, rely on per-route authMiddleware for protected routes
The /webhook/:id route uses token+id-based auth (like backend webhooks) and should not require a JWT at the Supabase gateway. - verify_jwt = false on the enrich function - authMiddleware applied to /person and /person/bulk routes (accepts service role OR user JWT) - /webhook/:id route stays unauthenticated at gateway level - Re-tested: auth flows work, webhook accessible without JWT
1 parent 481bf84 commit 0f8f48a

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

supabase/config.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -362,7 +362,7 @@ entrypoint = "./functions/mining-sources/index.ts"
362362

363363
[functions.enrich]
364364
enabled = true
365-
verify_jwt = true
365+
verify_jwt = false
366366
import_map = "./functions/enrich/deno.json"
367367
entrypoint = "./functions/enrich/index.ts"
368368

0 commit comments

Comments
 (0)