v4.0: Web API analyze route — forward auth token to backend

web/app/api/analyze/route.ts

@@ -1,4 +1,5 @@
 import { NextRequest, NextResponse } from "next/server";
+import { createClient } from "@/lib/supabase/server";
 
 const API_URL = process.env.CLAUSEGUARD_API_URL || "https://gaurv007-clauseguard-api.hf.space";
 
@@ -14,10 +15,19 @@ export async function POST(req: NextRequest) {
       );
     }
 
-    // Forward to backend API v2.0 (full text, clauses split server-side)
+    // Forward auth token to backend
+    const headers: Record<string, string> = { "Content-Type": "application/json" };
+    try {
+      const supabase = await createClient();
+      const { data: { session } } = await supabase.auth.getSession();
+      if (session?.access_token) {
+        headers["Authorization"] = `Bearer ${session.access_token}`;
+      }
+    } catch {}
+
     const response = await fetch(`${API_URL}/api/analyze`, {
       method: "POST",
-      headers: { "Content-Type": "application/json" },
+      headers,
       body: JSON.stringify({ text, source_url }),
     });