From 539f18397c932e7be1fbb3b122445dfac5535e6e Mon Sep 17 00:00:00 2001
From: "gpt-engineer-app[bot]"
 <159125892+gpt-engineer-app[bot]@users.noreply.github.com>
Date: Sat, 18 Apr 2026 18:06:45 +0000
Subject: [PATCH] Changes

Co-authored-by: renee-png <262607627+renee-png@users.noreply.github.com>
---
 .../supabase/auth-client-middleware.ts           | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 src/integrations/supabase/auth-client-middleware.ts

diff --git a/src/integrations/supabase/auth-client-middleware.ts b/src/integrations/supabase/auth-client-middleware.ts
new file mode 100644
index 0000000..c833505
--- /dev/null
+++ b/src/integrations/supabase/auth-client-middleware.ts
@@ -0,0 +1,16 @@
+import { createMiddleware } from "@tanstack/react-start";
+import { supabase } from "./client";
+
+// Client-side middleware for server functions: forwards the current
+// Supabase access token as a Bearer Authorization header so that the
+// server-side `requireSupabaseAuth` middleware can authenticate the request.
+export const attachSupabaseAuth = createMiddleware({ type: "function" }).client(
+  async ({ next }) => {
+    const { data } = await supabase.auth.getSession();
+    const token = data.session?.access_token;
+    return next({
+      sendContext: {},
+      headers: token ? { Authorization: `Bearer ${token}` } : {},
+    });
+  },
+);