From d5803daa670328b3911b6a37942abbe950331531 Mon Sep 17 00:00:00 2001
From: weeihan <whyap79@gmail.com>
Date: Sat, 18 Jul 2026 18:00:00 +0800
Subject: [PATCH] fix(admin): delete auth user on profile update failure

---
 app/api/admin/users/route.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/app/api/admin/users/route.ts b/app/api/admin/users/route.ts
index e84a15b..d66bfa8 100644
--- a/app/api/admin/users/route.ts
+++ b/app/api/admin/users/route.ts
@@ -67,11 +67,13 @@ export async function POST(request: NextRequest) {
       site_id: body.site_id ?? null,
     })
     .eq('id', newUserId)
-  if (profileError)
+  if (profileError) {
+    await admin.auth.admin.deleteUser(newUserId)
     return NextResponse.json(
       { error: 'User created but profile update failed' },
       { status: 500 },
     )
+  }
 
   await supabase.rpc('write_audit_log', {
     p_table_name: 'users',