Revert "fix(public): use admin client for public course pages on non-default tenants"

This reverts commit 031b5da.

Author: guillermoscript

app/[locale]/(public)/courses/[id]/page.tsx

@@ -1,5 +1,4 @@
 import { createClient } from "@/lib/supabase/server";
-import { createAdminClient } from "@/lib/supabase/admin";
 import { Button } from "@/components/ui/button";
 import Link from "next/link";
 import { notFound } from "next/navigation";
@@ -23,7 +22,7 @@ import {
 } from "@/components/ui/accordion";
 import { Card, CardContent } from "@/components/ui/card";
 import { getTranslations } from 'next-intl/server';
-import { getCurrentUserId, getCurrentTenantId } from '@/lib/supabase/tenant'
+import { getCurrentUserId } from '@/lib/supabase/tenant'
 
 export const dynamic = 'force-dynamic';
 
@@ -37,14 +36,11 @@ interface Lesson {
 export default async function CourseDetailsPage(props: { params: Promise<{ id: string }> }) {
     const params = await props.params;
     const t = await getTranslations('coursePublicDetails');
-    const tenantId = await getCurrentTenantId();
-    // Use admin client for public reads — anon JWT has no tenant_id claim,
-    // so RLS get_tenant_id() defaults to wrong tenant for non-default tenants.
-    const adminClient = createAdminClient();
+    const supabase = await createClient();
 
     const userId = await getCurrentUserId()
     // Fetch course with lessons and category
-    const { data: course, error } = await adminClient
+    const { data: course, error } = await supabase
         .from("courses")
         .select(`
             *,
@@ -61,7 +57,6 @@ export default async function CourseDetailsPage(props: { params: Promise<{ id: s
         `)
         .eq("course_id", parseInt(params.id))
         .eq("status", "published")
-        .eq("tenant_id", tenantId)
         .single();
 
     if (error || !course) {
@@ -71,7 +66,7 @@ export default async function CourseDetailsPage(props: { params: Promise<{ id: s
     // Fetch author separately (profiles is global, no tenant_id)
     let author = null;
     if (course.author_id) {
-        const { data: authorData } = await adminClient
+        const { data: authorData } = await supabase
             .from("profiles")
             .select("id, full_name, avatar_url, bio")
             .eq("id", course.author_id)
@@ -85,10 +80,9 @@ export default async function CourseDetailsPage(props: { params: Promise<{ id: s
     const estimatedHours = Math.floor(totalLessons * 10 / 60);
     const estimatedMinutes = (totalLessons * 10) % 60;
 
-    // Check user's enrollment (uses RLS client — only works for logged-in users)
+    // Check user's enrollment
     let hasAccess = false;
     if (userId) {
-        const supabase = await createClient();
         const { data: enrollment } = await supabase
             .from('enrollments')
             .select('enrollment_id')
@@ -103,7 +97,7 @@ export default async function CourseDetailsPage(props: { params: Promise<{ id: s
     }
 
     // Fetch product for pricing
-    const { data: productCourses } = await adminClient
+    const { data: productCourses } = await supabase
         .from('product_courses')
         .select('product:products(*)')
         .eq('course_id', parseInt(params.id))

app/[locale]/(public)/courses/page.tsx

@@ -1,4 +1,4 @@
-import { createAdminClient } from "@/lib/supabase/admin";
+import { createClient } from "@/lib/supabase/server";
 import { getCurrentTenantId } from "@/lib/supabase/tenant";
 import { CourseCard } from "@/components/public/course-card";
 import { CourseSearchBar } from "@/components/shared/course-search-bar";
@@ -15,9 +15,7 @@ export default async function CoursesPage({
     const { search, category } = await searchParams;
     const t = await getTranslations('coursesCatalog');
     const tSearch = await getTranslations('courseSearch');
-    // Use admin client for public reads — anon JWT has no tenant_id claim,
-    // so RLS get_tenant_id() defaults to wrong tenant for non-default tenants.
-    const supabase = createAdminClient();
+    const supabase = await createClient();
     const tenantId = await getCurrentTenantId();
 
     // Sanitize search input — strip special characters used in ilike patterns