From da95523101d4ed8dbd0f6091d85f657fca034dde Mon Sep 17 00:00:00 2001 From: Paul Bailey Date: Sun, 16 Nov 2025 19:26:56 +0000 Subject: [PATCH] fix: update Clerk auth to use networkless JWT verification - Replace deprecated verifySession() with verifyToken() - Use JWT-based authentication (networkless verification) - Update Clerk secret key to correct test key - Fixes 410 Gone error from deprecated endpoint This resolves the authentication issues with file uploads. --- server/src/middleware/auth.ts | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/server/src/middleware/auth.ts b/server/src/middleware/auth.ts index 6f87f7f..6b0ab16 100644 --- a/server/src/middleware/auth.ts +++ b/server/src/middleware/auth.ts @@ -26,10 +26,10 @@ export const requireAuth = async ( const token = authHeader.substring(7); - // Verify the session token with Clerk - const session = await clerkClient.sessions.verifySession(token, token); + // Verify the session token using networkless verification (JWT) + const payload = await clerkClient.verifyToken(token); - if (!session) { + if (!payload || !payload.sub) { return res.status(401).json({ error: { code: 'INVALID_TOKEN', @@ -39,8 +39,8 @@ export const requireAuth = async ( }); } - // Attach user ID to request - req.userId = session.userId; + // Attach user ID to request (sub is the user ID in JWT) + req.userId = payload.sub; next(); } catch (error) {