Supabase + Next.js 16: authorize with getClaims(), not getSession()
A developer documented that Supabase server-side auth code generated by AI agents and older tutorials commonly uses getSession() for authorization, which loads the session from the user-controlled aut…