Comprehensive audit: Replace backend JWT dependency universally with anon key and strict cache rules

This commit is contained in:
Christian Vidal Wolf
2026-04-10 19:56:42 +02:00
parent d9cc1f4506
commit dcdf50593d
2 changed files with 7 additions and 4 deletions
+3
View File
@@ -40,6 +40,9 @@ export default async function handler(req, res) {
body: JSON.stringify({ path: '/CRAZE GmbH/Sales Reports/Data Matrix.xlsx' })
});
const data = await fileInfo.json();
res.setHeader('Cache-Control', 'no-store, no-cache, must-revalidate, proxy-revalidate');
res.setHeader('Pragma', 'no-cache');
res.setHeader('Expires', '0');
return res.json({ rev: data.rev, size: data.size, server_modified: data.server_modified });
} catch (err) {
return res.status(500).json({ error: err.message });
+4 -4
View File
@@ -47,7 +47,7 @@ export async function saveRowToSupabase(articleNo: string, rowData: ExcelRow, to
headers: {
'Content-Type': 'application/json',
'apikey': SUPABASE_KEY,
'Authorization': `Bearer ${token || SUPABASE_KEY}`,
'Authorization': `Bearer ${SUPABASE_KEY}`,
'Prefer': 'resolution=merge-duplicates'
},
body: JSON.stringify({
@@ -100,7 +100,7 @@ export async function saveHistoryEntry(
headers: {
'Content-Type': 'application/json',
'apikey': SUPABASE_KEY,
'Authorization': `Bearer ${token || SUPABASE_KEY}`,
'Authorization': `Bearer ${SUPABASE_KEY}`,
'Prefer': 'return=minimal'
},
body: JSON.stringify({
@@ -178,7 +178,7 @@ export async function deleteHistoryEntry(id: string, token?: string): Promise<bo
method: 'DELETE',
headers: {
'apikey': SUPABASE_KEY,
'Authorization': `Bearer ${token || SUPABASE_KEY}`
'Authorization': `Bearer ${SUPABASE_KEY}`
}
}
);
@@ -199,7 +199,7 @@ export async function resetAllPendingRows(token?: string): Promise<boolean> {
headers: {
'Content-Type': 'application/json',
'apikey': SUPABASE_KEY,
'Authorization': `Bearer ${token || SUPABASE_KEY}`,
'Authorization': `Bearer ${SUPABASE_KEY}`,
'Prefer': 'return=minimal'
},
body: JSON.stringify({ status: 'synced' })