Skip to content

Normalize verify-sms session bearer tokens - #150

Merged
ralyodio merged 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/verify-sms-bearer-normalization
Jul 12, 2026
Merged

Normalize verify-sms session bearer tokens#150
ralyodio merged 1 commit into
profullstack:masterfrom
aiirvizionz:clientkit/verify-sms-bearer-normalization

Conversation

@aiirvizionz

Copy link
Copy Markdown
Contributor

Summary

  • normalize verify-sms session Bearer headers with case-insensitive scheme handling and whitespace trimming
  • require a valid session Bearer token whenever useSession is true
  • reject empty Bearer headers before calling Supabase session validation

Tests

  • vitest run src/app/api/auth/verify-sms/route.test.js
  • node --check src/app/api/auth/verify-sms/route.js
  • node --check src/app/api/auth/verify-sms/route.test.js
  • git diff --check

let verifyError;

if (useSession && authHeader) {
if (useSession) {
@ralyodio
ralyodio merged commit 9a87378 into profullstack:master Jul 12, 2026
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants