perf(auth): replace getUser() with getSession() in 15 server/client components

These files needed the full User object (email, metadata) so they couldn't use
getCurrentUserId(). Now use getSessionUser() which reads from the cookie
(zero network calls) instead of getUser() (1 auth API call each).

Safe because the middleware already validated the token via getUser() — subsequent
reads within the same request don't need re-validation.

Also adds getSessionUser() helper to lib/supabase/tenant.ts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: guillermoscript

app/[locale]/(public)/checkout/page.tsx

@@ -6,6 +6,7 @@ import { PackageSearch, ArrowLeft } from "lucide-react";
 import Link from "next/link";
 import { Button } from "@/components/ui/button";
 import { getCurrentTenantId } from "@/lib/supabase/tenant";
+import { getSessionUser } from '@/lib/supabase/tenant'
 
 interface SearchParams {
     courseId?: string;
@@ -19,8 +20,7 @@ export default async function CheckoutPage(props: { params: Promise<{ locale: st
     const t = await getTranslations('checkout');
 
     const supabase = await createClient();
-    const { data: { user } } = await supabase.auth.getUser();
-
+    const user = await getSessionUser()
     if (!user) {
         const returnUrl = encodeURIComponent(`/checkout?${courseId ? `courseId=${courseId}` : `planId=${planId}`}`);
         redirect(`/auth/login?next=${returnUrl}`);

app/[locale]/checkout/manual/page.tsx

@@ -1,7 +1,7 @@
-import { createClient } from '@/lib/supabase/server'
 import { redirect } from 'next/navigation'
 import { getTranslations } from 'next-intl/server'
-import { getCurrentTenantId } from '@/lib/supabase/tenant'
+import { createClient } from '@/lib/supabase/server'
+import { getCurrentTenantId, getSessionUser } from '@/lib/supabase/tenant'
 import { PaymentRequestForm } from '@/components/student/payment-request-form'
 import { IconShieldCheck, IconLock } from '@tabler/icons-react'
 
@@ -18,15 +18,12 @@ export default async function ManualCheckoutPage(props: {
   const { locale } = await props.params
   const { productId, planId } = searchParams
   const t = await getTranslations('checkout.manual')
-
-  const supabase = await createClient()
   const tenantId = await getCurrentTenantId()
 
-  // Get authenticated user
-  const {
-    data: { user },
-  } = await supabase.auth.getUser()
+  const supabase = await createClient()
 
+  // Get authenticated user (no network call — reads from cookie)
+  const user = await getSessionUser()
   if (!user) {
     const returnParam = productId ? `productId=${productId}` : `planId=${planId}`
     const returnUrl = encodeURIComponent(`/checkout/manual?${returnParam}`)

app/[locale]/create-school/page.tsx

@@ -1,17 +1,14 @@
-import { createClient } from '@/lib/supabase/server'
 import { CreateSchoolFlow } from '@/components/tenant/create-school-flow'
+import { getSessionUser } from '@/lib/supabase/tenant'
 
 export default async function CreateSchoolPage() {
-  const supabase = await createClient()
-  const { data: { user }, error } = await supabase.auth.getUser()
-  // If JWT is invalid/expired, treat as unauthenticated
-  const validUser = error ? null : user
+  const user = await getSessionUser()
 
   return (
     <div className="min-h-screen bg-[#0A0A0A] flex items-center justify-center p-4">
       <div className="w-full max-w-lg">
         <CreateSchoolFlow
-          user={validUser ? { id: validUser.id, email: validUser.email || '' } : null}
+          user={user ? { id: user.id, email: user.email || '' } : null}
         />
       </div>
     </div>

app/[locale]/dashboard/admin/enrollments/page.tsx

@@ -5,7 +5,7 @@ import { getTranslations } from 'next-intl/server'
 import { format } from 'date-fns'
 import { es, enUS } from 'date-fns/locale'
 import { getUserRole } from '@/lib/supabase/get-user-role'
-import { getCurrentTenantId } from '@/lib/supabase/tenant'
+import { getCurrentTenantId, getSessionUser } from '@/lib/supabase/tenant'
 import { Card, CardContent, CardHeader, CardTitle } from '@/components/ui/card'
 import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
@@ -25,10 +25,7 @@ export default async function AdminEnrollmentsPage({
   const supabase = await createClient()
   const tenantId = await getCurrentTenantId()
 
-  const {
-    data: { user },
-  } = await supabase.auth.getUser()
-
+  const user = await getSessionUser()
   if (!user) {
     redirect('/auth/login')
   }

app/[locale]/dashboard/layout.tsx

@@ -2,7 +2,7 @@ import { SidebarProvider, SidebarTrigger, SidebarInset } from "@/components/ui/s
 import { AppSidebar } from "@/components/app-sidebar"
 import { Separator } from "@/components/ui/separator"
 import { getUserRole } from "@/lib/supabase/get-user-role"
-import { createClient } from "@/lib/supabase/server"
+import { getSessionUser } from "@/lib/supabase/tenant"
 import { ModeToggle } from "@/components/mode-toggle"
 import { UserNav } from "@/components/user-nav"
 import { LanguageSwitcher } from "@/components/language-switcher"
@@ -14,8 +14,7 @@ export default async function DashboardLayout({
     children: React.ReactNode
 }) {
     const role = await getUserRole()
-    const supabase = await createClient()
-    const { data: { user } } = await supabase.auth.getUser()
+    const user = await getSessionUser()
 
     return (
         <SidebarProvider>

app/[locale]/dashboard/student/courses/[courseId]/exams/[examId]/exam-taker.tsx

@@ -92,9 +92,8 @@ export function ExamTaker({
     setSubmitting(true)
 
     try {
-      const {
-        data: { user },
-      } = await supabase.auth.getUser()
+      const { data: { session } } = await supabase.auth.getSession()
+      const user = session?.user
 
       if (!user) {
         router.push('/auth/login')

app/[locale]/dashboard/student/courses/[courseId]/lessons/[lessonId]/lesson-navigation.tsx

@@ -50,9 +50,8 @@ export function LessonNavigation({
   async function handleComplete() {
     setLoading(true)
 
-    const {
-      data: { user },
-    } = await supabase.auth.getUser()
+    const { data: { session } } = await supabase.auth.getSession()
+    const user = session?.user
 
     if (!user) {
       setLoading(false)

app/[locale]/dashboard/student/page.tsx

@@ -1,5 +1,5 @@
-import { createClient } from '@/lib/supabase/server'
 import { redirect } from 'next/navigation'
+import { createClient } from '@/lib/supabase/server'
 import { getTranslations } from 'next-intl/server'
 import { WelcomeHero } from '@/components/student/welcome-hero'
 import { StatsCards } from '@/components/student/stats-cards'
@@ -10,7 +10,7 @@ import { IconRocket, IconSparkles, IconCircleCheck } from '@tabler/icons-react'
 import { Button } from '@/components/ui/button'
 import Link from 'next/link'
 import { MiniLeaderboard } from '@/components/gamification/mini-leaderboard'
-import { getCurrentTenantId } from '@/lib/supabase/tenant'
+import { getCurrentTenantId, getSessionUser } from '@/lib/supabase/tenant'
 import { OnboardingChecklist } from '@/components/shared/onboarding-checklist'
 import { StudentDashboardTour } from '@/components/tours/student-dashboard-tour'
 
@@ -105,10 +105,7 @@ async function getData(userId: string, tenantId: string) {
 export default async function StudentDashboard() {
   const tenantId = await getCurrentTenantId()
   const supabase = await createClient()
-  const {
-    data: { user },
-  } = await supabase.auth.getUser()
-
+  const user = await getSessionUser()
   if (!user) {
     redirect('/auth/login')
   }

app/[locale]/dashboard/student/profile/page.tsx

@@ -1,4 +1,3 @@
-import { createClient } from '@/lib/supabase/server'
 import { redirect } from 'next/navigation'
 import { getTranslations } from 'next-intl/server'
 import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card"
@@ -27,7 +26,8 @@ import { ProfileGamificationStats } from '@/components/gamification/profile-stat
 import Link from 'next/link'
 import Image from 'next/image'
 import { StudentCertificateCard } from '@/components/student/student-certificate-card'
-import { getCurrentTenantId } from '@/lib/supabase/tenant'
+import { getCurrentTenantId, getSessionUser } from '@/lib/supabase/tenant'
+import { createClient } from '@/lib/supabase/server'
 
 async function getProfileData(userId: string, tenantId: string) {
     const supabase = await createClient()
@@ -258,8 +258,7 @@ function PurchasedCourseCard({ course: ec, labels }: { course: any; labels: { no
 export default async function ProfilePage() {
     const tenantId = await getCurrentTenantId()
     const supabase = await createClient()
-    const { data: { user } } = await supabase.auth.getUser()
-
+    const user = await getSessionUser()
     if (!user) {
         redirect('/auth/login')
     }

app/[locale]/onboarding/page.tsx

@@ -1,17 +1,14 @@
+import { getCurrentTenantId, getSessionUser } from '@/lib/supabase/tenant'
 import { createClient } from '@/lib/supabase/server'
-import { getCurrentTenantId } from '@/lib/supabase/tenant'
 import { redirect } from 'next/navigation'
 import { getTranslations } from 'next-intl/server'
 import OnboardingWizard from '@/components/onboarding/onboarding-wizard'
 
 export default async function OnboardingPage() {
-  const supabase = await createClient()
   const t = await getTranslations('onboarding')
 
-  const {
-    data: { user },
-  } = await supabase.auth.getUser()
-
+  const supabase = await createClient()
+  const user = await getSessionUser()
   if (!user) {
     redirect('/auth/login')
   }