fix: add HS256 fallback for JWT verification in local dev

Local GoTrue signs JWTs with HS256, but the JWKS endpoint returns an
empty key set since there are no RSA keys. Fall back to HS256 shared
secret verification when JWKS fails, using SUPABASE_JWT_SECRET.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

backend/.env.example

@@ -11,3 +11,5 @@ DATABASE_URL="sqlite:///./nuzlocke.db"
 # Supabase Auth (JWKS used for JWT verification)
 SUPABASE_URL=https://your-project.supabase.co
 SUPABASE_ANON_KEY=your-anon-key
+# HS256 fallback for local GoTrue (not needed for Supabase Cloud):
+# SUPABASE_JWT_SECRET=super-secret-jwt-token-with-at-least-32-characters-long

backend/src/app/core/auth.py

@@ -44,26 +44,36 @@ def _extract_token(request: Request) -> str | None:
     return parts[1]
 
 
-def _verify_jwt(token: str) -> dict | None:
-    """Verify JWT using JWKS public key. Returns payload or None."""
-    client = _get_jwks_client()
-    if not client:
+def _verify_jwt_hs256(token: str) -> dict | None:
+    """Verify JWT using HS256 shared secret. Returns payload or None."""
+    if not settings.supabase_jwt_secret:
         return None
     try:
-        signing_key = client.get_signing_key_from_jwt(token)
-        payload = jwt.decode(
+        return jwt.decode(
             token,
-            signing_key.key,
-            algorithms=["RS256"],
+            settings.supabase_jwt_secret,
+            algorithms=["HS256"],
             audience="authenticated",
         )
-        return payload
-    except jwt.ExpiredSignatureError:
-        return None
     except jwt.InvalidTokenError:
         return None
-    except PyJWKClientError:
-        return None
+
+
+def _verify_jwt(token: str) -> dict | None:
+    """Verify JWT using JWKS (RS256), falling back to HS256 shared secret."""
+    client = _get_jwks_client()
+    if client:
+        try:
+            signing_key = client.get_signing_key_from_jwt(token)
+            return jwt.decode(
+                token,
+                signing_key.key,
+                algorithms=["RS256"],
+                audience="authenticated",
+            )
+        except jwt.InvalidTokenError, PyJWKClientError:
+            pass
+    return _verify_jwt_hs256(token)
 
 
 def get_current_user(request: Request) -> AuthUser | None:

backend/src/app/core/config.py

@@ -20,6 +20,7 @@ class Settings(BaseSettings):
     # Supabase Auth
     supabase_url: str | None = None
     supabase_anon_key: str | None = None
+    supabase_jwt_secret: str | None = None
 
 
 settings = Settings()