Hono Supabase Auth: How to Verify JWTs in Your API
Four ways to verify a Supabase JWT in a Hono API—@supabase/server, getClaims(), JWK middleware, and the legacy JWT secret—compared by signing algorithm, network calls, and when to use each.
Unbx Journal
Architecture decisions, AI coding habits, and review systems that scale.
Notes for engineering teams that need deterministic guardrails around AI-generated code, structural rules, and pull request workflows.
Topicsupabase
Four ways to verify a Supabase JWT in a Hono API—@supabase/server, getClaims(), JWK middleware, and the legacy JWT secret—compared by signing algorithm, network calls, and when to use each.
PublishedAugust 1, 2026
hono
Slughono-supabase-jwt-auth
You have Supabase Auth in your frontend. Your users sign in, `supabase.auth.getSession()` returns an access token, and y...
Recent writing
Articles
Supabase RLS Not Working? How to Debug It with Unified Logs
Authentication succeeds but the query returns nothing—or an INSERT fails with a policy violation. This guide shows how to trace the failure across Auth, PostgREST, and Postgres using Supabase Unified Logs, and how to fix the five most common RLS causes.
How to Redeploy Cloudflare Pages When Another Repository Changes
Cloudflare Pages' Git integration watches a single repository. If your content or data lives in a different repo, you need a Deploy Hook and a GitHub Actions workflow to connect them.
6 Reasons Claude Code Ignores Your CLAUDE.md—and How to Diagnose Each One
CLAUDE.md rules don't always hold. Most failures fall into one of six diagnosable categories—four fixable by improving the file, two requiring a different approach entirely. Here's how to identify which problem you're dealing with.
AI Code Review Is the New Bottleneck. Another Reviewer Won't Fix It.
AI coding agents increase pull request volume, but review capacity stays flat. Adding an AI reviewer addresses the symptom, not the problem. This article explains why, and how moving deterministic architecture checks before human review changes the constraint.
Why AI Coding Agents Cause Architecture Drift (and Why CLAUDE.md Won't Fix It)
AI coding agents generate locally correct code that can silently cross architectural boundaries. Instruction files like CLAUDE.md don't reliably prevent this—they're probabilistic input, not deterministic constraints. This article explains why, with a concrete enforcement example.