mirror of
https://github.com/supabase/supabase.git
synced 2026-05-06 08:56:46 -04:00
Tomás Pozo
75aa1b9e40
## I have read the [CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md) file. YES ## What kind of change does this PR introduce? Update our documentation about securing Edge Functions using the new supabase/server sdk. ## What is the current behavior? Current documentation shows how to do a manual validation of the incoming JWT. The new sdk abstracts that logic and provides a new DX. ## What is the new behavior? None. ## Additional context None. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **Documentation** * Updated Edge Functions authentication guide with explicit two-layer auth patterns. * Clarified header usage and distinction between user JWTs and API keys. * Documented platform JWT verification behavior and 401 handling. * Added examples for user-authenticated calls, service-to-service calls, public endpoints, and webhook handlers. * Added server-side SDK patterns with configurable allow modes and customizable auth responses. * Expanded environment variable reference for auth configuration. <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: Kalleby Santos <kalleby_santos@hotmail.com> Co-authored-by: Chris Chinchilla <chris.ward@supabase.io> Co-authored-by: Chris Chinchilla <chris@chrischinchilla.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
