Skip to content

Allow Supabase JWT passthrough#238

Merged
RafaelPo merged 2 commits intomainfrom
accept-jwt-for-authentication
Feb 26, 2026
Merged

Allow Supabase JWT passthrough#238
RafaelPo merged 2 commits intomainfrom
accept-jwt-for-authentication

Conversation

@rgambee
Copy link
Contributor

@rgambee rgambee commented Feb 26, 2026

This allows Supabase JWTs to be passed through to the API. The thinking is that ER-CC would send the remote MCP server the users JWT, and the MCP server would pass that along to the API, just as it does when running locally.

It should be backwards compatible

Needs testing

@rgambee rgambee requested a review from RafaelPo February 26, 2026 16:58
@RafaelPo RafaelPo force-pushed the accept-jwt-for-authentication branch from 1892b44 to 1ff2771 Compare February 26, 2026 18:07
Allows configuring additional allowed Host headers via a comma-separated
env var, enabling cross-Docker-network access (e.g. host.docker.internal).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@RafaelPo RafaelPo force-pushed the accept-jwt-for-authentication branch from 1ff2771 to d906235 Compare February 26, 2026 18:10
@RafaelPo RafaelPo merged commit 826d322 into main Feb 26, 2026
5 checks passed
@RafaelPo RafaelPo deleted the accept-jwt-for-authentication branch February 26, 2026 18:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants