fix(auth,capa): restore auth callback, fix CAPA status update

- auth callback: remove debug redirect, handle both code (PKCE) and
  token_hash+type (recovery/magic link) flows correctly
- capa PATCH: use admin client to bypass RLS for status updates

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WMymkhHZiaYZtUeH9MEHZQ
This commit is contained in:
2026-07-22 19:43:38 +08:00
co-authored by Claude Sonnet 4.6
parent 4fbab33de4
commit 0e479b648f
8 changed files with 83 additions and 26 deletions
Binary file not shown.