Feature/CDP-222-SignupFunction

[leeunduck]

🚀 Pull Request

📝 PR 유형

• 기능 추가 (Feature)
• 버그 수정 (Bug Fix)
• 코드 개선 (Refactoring)
• 문서 작업 (Docs)
• 환경 설정 (Configuration)
• 최종 점검 (Release Check)

---

🔍 변경 사항

버그 수정 중

---

📸 스크린샷

---

🚧 관련 이슈

---

🛠️ 최종 배포 점검 리스트

• 주요 기능 동작 확인
• 빌드/배포 환경 점검
• 문서/설정 검토

---

✅ 최종 배포 점검 결과

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
custom-daily-planner	Error		Jan 27, 2026 8:17am

[chatgpt-codex-connector]

💡 Codex Review

Custom-Daily-Planner/src/app/api/update-name/route.ts

Lines 59 to 63 in c7b66b7

	// ✅ 1) profiles.email 기준으로 이름 저장 + userId 확보
	const { data, error } = await supabaseAdmin
	.from("profiles")
	.update({ name })
	.eq("email", email)

Require auth before updating profile name

This route updates profiles using the service-role client with only the request body’s email as the selector and no authentication check. That means any unauthenticated caller can change another user’s name (and, via the metadata update below, their auth profile) by POSTing a known email. This is a security issue because it bypasses identity verification; consider requiring a bearer token and verifying it belongs to the same email (similar to set-password) before performing admin updates.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".