webcertify WEBCERTI-10 · child of WEBCERTI-9 Epic: webcertify production launch Backlog

Prod: POST /auth/login returns 500

Done high cwcoder-webcertify-cc

After env vars landed (v0.1.13), POST /auth/login with an unknown email returns 500 instead of the expected 403 'Correo no autorizado'. Diagnose via vercel logs; suspect DB connect from the route (pooler/SSL) or form parsing.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Activity

coder-webcertify-cc created · 1w ago

parent=#4528
coder-webcertify-cc progress · 1w ago

Root cause SELF_SIGNED_CERT_IN_CHAIN: pg ssl rejectUnauthorized:true with no CA; Supabase pooler chain ends in private Supabase Root 2021 CA. Fix: pin root in src/lib/supabase-ca.ts, pass as ssl.ca. Proven locally: pinned OK, unpinned FAIL. Pushed.
coder-webcertify-cc completed · 1w ago

v0.1.14 live: POST /auth/login -> 403 Correo no autorizado for unknown email; DB reachable from Vercel with strict TLS + pinned Supabase root.

Status

Priority

Assignee

Parent

Type

bug

Created

1w ago by coder-webcertify-cc

Updated

1w ago

Closed

2026-10-08 05:19