Skip to content

Restore production Supabase auth landing pages - #460

Open
Muawiya-contact wants to merge 2 commits into
mainfrom
codex/production-supabase-auth-hotfix
Open

Muawiya-contact wants to merge 2 commits into
mainfrom
codex/production-supabase-auth-hotfix

Conversation

@Muawiya-contact

@Muawiya-contact Muawiya-contact commented Oct 25, 2026 •

Copy link
Copy Markdown
Member

Production cutover hotfix

The production Supabase API still returns HTTP 404 for the public /confirmed, /reset-password, and /privacy paths after Railway was deleted. The installed production app sends new signup and recovery redirects to the Supabase API address, so these missing routes can strand new accounts and password resets. The Netlify review site's learner privacy link also points at a missing path.

This PR restores the three public browser pages in the current production main Edge API, adds route tests, and points the review site's learner privacy link at the Supabase page. It contains no database migration, mobile update, worker change, content switch, or new native dependency. The same fixes and separate mobile privacy-link cleanup are proposed for develop in #459; this narrow main hotfix avoids releasing #458 and its staging-only migrations prematurely.

Verification

  • Direct production checks showed HTTP 404 for all three paths before this fix; production /health and the reviewer website returned HTTP 200.
  • Edge TypeScript check and all 94 handler tests passed on the current main base.
  • A local headless browser completed the recovery form against a mocked Supabase Auth endpoint, cleared the token fragment, rejected a bare reset URL, and followed a fallback recovery link from /confirmed.

After an approved merge

Use the protected Deploy Supabase API and worker to production workflow on the exact merged main commit. Confirm the two exact Edge URLs are allowed in production Supabase Auth. Check all three browser paths return HTML, then test fresh signup and recovery emails with an owner-controlled account. Set the Site URL fallback to the exact /functions/v1/api/confirmed address only after it is live. The worker code is unchanged and existing generation/refill gates stay as they are. This operational API deploy does not run the mobile Release workflow or publish an OTA.

@netlify

netlify Bot commented Oct 25, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for coding-moves-one-concept-review ready!

Name Link
🔨 Latest commit 2ab8a3a
🔍 Latest deploy log https://app.netlify.com/projects/coding-moves-one-concept-review/deploys/6addba7b8678760ac536ac36
😎 Deploy Preview https://deploy-preview-460--coding-moves-one-concept-review.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ⚠️ Failed 2026-10-25T08:12:05.405087Z
We couldn’t complete this review. Comment @codex review to try again.
14f0b52 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant