feat: add backend jwt middleware

platform/config/config.go

@@ -9,17 +9,18 @@ import (
 )
 
 type Config struct {
-	AppEnv             string
-	LogLevel           slog.Level
-	BackendAddr        string
-	ConsoleProxyAddr   string
+	AppEnv            string
+	LogLevel          slog.Level
+	BackendAddr       string
+	ConsoleProxyAddr  string
 	WorkerConcurrency int
-	DatabaseURL        string
-	DatabaseDirectURL  string
-	SupabaseURL        string
-	SupabaseJWKSURL    string
-	SupabaseIssuer     string
-	RedisAddr          string
+	DatabaseURL       string
+	DatabaseDirectURL string
+	SupabaseURL       string
+	SupabaseJWKSURL   string
+	SupabaseIssuer    string
+	SupabaseJWTSecret string
+	RedisAddr         string
 }
 
 func Load() (Config, error) {
@@ -37,17 +38,18 @@ func Load() (Config, error) {
 	}
 
 	return Config{
-		AppEnv:             getenv("APP_ENV", "development"),
-		LogLevel:           logLevel,
-		BackendAddr:        getenv("BACKEND_ADDR", ":8080"),
-		ConsoleProxyAddr:   getenv("CONSOLE_PROXY_ADDR", ":8081"),
+		AppEnv:            getenv("APP_ENV", "development"),
+		LogLevel:          logLevel,
+		BackendAddr:       getenv("BACKEND_ADDR", ":8080"),
+		ConsoleProxyAddr:  getenv("CONSOLE_PROXY_ADDR", ":8081"),
 		WorkerConcurrency: workerConcurrency,
-		DatabaseURL:        os.Getenv("DATABASE_URL"),
-		DatabaseDirectURL:  os.Getenv("DATABASE_DIRECT_URL"),
-		SupabaseURL:        os.Getenv("SUPABASE_URL"),
-		SupabaseJWKSURL:    os.Getenv("SUPABASE_JWKS_URL"),
-		SupabaseIssuer:     os.Getenv("SUPABASE_ISSUER"),
-		RedisAddr:          getenv("REDIS_ADDR", "localhost:6379"),
+		DatabaseURL:       os.Getenv("DATABASE_URL"),
+		DatabaseDirectURL: os.Getenv("DATABASE_DIRECT_URL"),
+		SupabaseURL:       os.Getenv("SUPABASE_URL"),
+		SupabaseJWKSURL:   os.Getenv("SUPABASE_JWKS_URL"),
+		SupabaseIssuer:    os.Getenv("SUPABASE_ISSUER"),
+		SupabaseJWTSecret: os.Getenv("SUPABASE_JWT_SECRET"),
+		RedisAddr:         getenv("REDIS_ADDR", "localhost:6379"),
 	}, nil
 }
 

platform/config/config_test.go

@@ -102,6 +102,7 @@ func clearConfigEnv(t *testing.T) {
 		"SUPABASE_URL",
 		"SUPABASE_JWKS_URL",
 		"SUPABASE_ISSUER",
+		"SUPABASE_JWT_SECRET",
 		"REDIS_ADDR",
 	} {
 		t.Setenv(key, "")