Your Supabase Edge Function Probably Has No Auth. 8 Out of 9 Vibe-Coded Apps I Scanned This Week Didn't.

Edge Functions run in the cloud at a public URL. Anyone with the URL can invoke them unless you explicitly verify the caller. Most AI-scaffolded apps ship with no verification at all — here's exactly what goes wrong and the 20-line fix.