nuzlocke-tracker/.beans/nuzlocke-tracker-eg7j--fix-jwt-verification-failing-in-local-dev-hs256-fa.md

title, status, type, priority, created_at, updated_at

title	status	type	priority	created_at	updated_at
Fix JWT verification failing in local dev (HS256 fallback)	completed	bug	normal	2026-03-22T08:37:18Z	2026-03-22T08:38:57Z

Local GoTrue signs JWTs with HS256, but the JWKS migration only supports RS256. The JWKS endpoint returns empty keys locally, causing 500 errors on all authenticated endpoints. Add HS256 fallback using SUPABASE_JWT_SECRET for local dev.

Summary of Changes\n\nAdded HS256 fallback to JWT verification so local GoTrue (which signs with HMAC) works alongside the JWKS/RS256 path used in production. Added SUPABASE_JWT_SECRET config setting, passed it in docker-compose.yml, and updated .env.example files.