setia/ims
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(auth): phase 3 — replace Supabase GoTrue with bcryptjs+jose

Browse Source 
Custom auth stack: bcryptjs password hashing (cost 10, GoTrue-compatible),
jose JWT session cookies (edge-safe, 8hr TTL), new API routes for
login/logout/reset/change-password, middleware rewritten to JWT-only
verification with no DB access. All 38 protected pages and API routes
migrated from supabase.auth.getUser() to getSession(). Supabase .from()
queries retained for Phase 4. lib/db/index.ts refactored to lazy Proxy
singleton to avoid module-level throw during Next.js build.

tsc: clean, build: clean, tests: 4/4 passed

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
admin
2026-07-23 16:20:04 +08:00
co-authored by Claude Sonnet 4.6
parent a95273b182
commit d18d29168a
67 changed files with 966 additions and 591 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/lib/supabase/storage.test.ts
+3 -4
View File
@@ -14,7 +14,6 @@ const mockSupabase = {
createSignedUrl: mockCreateSignedUrl,
})),
},
auth: { getUser: vi.fn().mockResolvedValue({ data: { user: { id: 'user-123' } }, error: null }) },
} as any
beforeEach(() => {
@@ -26,7 +25,7 @@ beforeEach(() => {
describe('uploadEvidenceFile', () => {
it('uploads to path user-id/incident-id/stage/filename', async () => {
const file = new File(['content'], 'photo.jpg', { type: 'image/jpeg' })
const result = await uploadEvidenceFile(mockSupabase, file, 'incident-abc', 'report')
const result = await uploadEvidenceFile(mockSupabase, file, 'incident-abc', 'report', 'user-123')
expect(mockSupabase.storage.from).toHaveBeenCalledWith('evidence')
expect(mockUpload).toHaveBeenCalledWith(
expect.stringContaining('user-123/incident-abc/report/'),
@@ -41,12 +40,12 @@ describe('uploadEvidenceFile', () => {
it('throws on upload error', async () => {
mockUpload.mockResolvedValue({ data: null, error: { message: 'Bucket not found' } })
const file = new File(['x'], 'f.jpg', { type: 'image/jpeg' })
await expect(uploadEvidenceFile(mockSupabase, file, 'inc', 'report')).rejects.toThrow('Bucket not found')
await expect(uploadEvidenceFile(mockSupabase, file, 'inc', 'report', 'user-123')).rejects.toThrow('Bucket not found')
})
it('throws when photo exceeds 10MB', async () => {
const bigFile = new File([new Uint8Array(11 * 1024 * 1024)], 'big.jpg', { type: 'image/jpeg' })
await expect(uploadEvidenceFile(mockSupabase, bigFile, 'inc', 'report')).rejects.toThrow('File too large')
await expect(uploadEvidenceFile(mockSupabase, bigFile, 'inc', 'report', 'user-123')).rejects.toThrow('File too large')
})
})