fix(store): authenticate module reviews - #67

Merged

ralyodio merged 1 commit into

profullstack:masterfrom

rissrice2105-agent:fix/authenticated-module-reviews

Jul 28, 2026

rissrice2105-agent commented Jul 28, 2026

Contributor

Fixes #66

Summary

require a valid Supabase session before accepting module reviews
derive user_email from the authenticated profile instead of request JSON
send the auth header from the store UI and make the account email read-only
add regression coverage for unauthenticated and spoofed-email requests

Validation

focused review route tests: 9 passed
TypeScript: tsc --noEmit
production build: next build
full web suite: 242 passed; two unrelated existing usage/topup failures remain


          fix(store): authenticate module reviews

65326d4

ralyodio merged commit 93653f8 into profullstack:master

9 checks passed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet