jwt

1 trace

• Using the user object as returned from supabase.auth.getSession() ... could be insecure! — verify with getClaims()
  Server logs (Next.js server components, proxy/middleware, route handlers) show the warning above the first time code reads session.user from supabase.auth.getSession(). Fix: Keep getSession() only for when you need the…
  Fixno outcome reports yet@supabase/supabase-js@2@supabase/ssrnext@162025-07-10