From 46b4e94689a7d07087f8a9cbfc38af62bafc4fc8 Mon Sep 17 00:00:00 2001
From: pavlov346346-source <pavlov346346@gmail.com>
Date: Fri, 11 Sep 2026 10:09:36 +0300
Subject: [PATCH] security: move temporary-password marker to app metadata

---
 supabase/functions/caterium-create-employee/index.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/supabase/functions/caterium-create-employee/index.ts b/supabase/functions/caterium-create-employee/index.ts
index d756182..4e0c99a 100644
--- a/supabase/functions/caterium-create-employee/index.ts
+++ b/supabase/functions/caterium-create-employee/index.ts
@@ -153,7 +153,10 @@ Deno.serve(async (req: Request) => {
       email_confirm: true,
       user_metadata: {
         name: displayName || email.split("@")[0],
+      },
+      app_metadata: {
         must_change_password: true,
+        password_policy_version: "v1774",
         registration_source: "caterium_employee_admin",
       },
     });