Replace placeholder Supabase credentials with fail-fast error throwing

[Copilot]

Addresses security risk where missing Supabase environment variables fell back to placeholder values, causing silent runtime failures instead of failing fast.

Changes

Replaced placeholder fallbacks with explicit error throwing in Supabase client initialization:

• lib/supabase/server.ts - Server client
• lib/supabase/client.ts - Browser client
• lib/supabase/middleware.ts - Middleware client

Before/After

// Before: Silent failure with placeholders
const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL || ""
const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || ""

if (!supabaseUrl || !supabaseAnonKey) {
  console.warn("Using placeholder values.")
}

return createServerClient(
  supabaseUrl || "https://placeholder.supabase.co",
  supabaseAnonKey || "placeholder-anon-key",
  // ...
)

// After: Fail fast with clear error
const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL
const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY

if (!supabaseUrl || !supabaseAnonKey) {
  throw new Error(
    "Missing Supabase environment variables. " +
    "Please set NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_ANON_KEY in your environment."
  )
}

return createServerClient(supabaseUrl, supabaseAnonKey, /* ... */)

Build now fails immediately when environment variables are missing, surfacing configuration issues at build time rather than runtime.

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
webdrop	Ready	Preview	Comment	Nov 6, 2025 2:35am

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

[jomzxc]

okay