From bd679f4e4232e277b1d0d8e95ef375f7550ee700 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 20 Mar 2026 06:30:27 +0000
Subject: [PATCH 1/2] Initial plan


From b32b6bf53ed00f8a928fdbcb9c03562385af0a5d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 20 Mar 2026 06:33:24 +0000
Subject: [PATCH 2/2] fix: use session.user.id instead of email for profile DB
 lookups

Co-authored-by: shammy911 <180457932+shammy911@users.noreply.github.com>
---
 app/api/user/profile/route.ts | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/app/api/user/profile/route.ts b/app/api/user/profile/route.ts
index 3efea84..93cfba0 100644
--- a/app/api/user/profile/route.ts
+++ b/app/api/user/profile/route.ts
@@ -6,12 +6,12 @@ export async function GET(req: Request) {
   try {
     const session = await getServerSession(authOptions);
 
-    if (!session) {
+    if (!session || !session.user?.id) {
       return new Response("Unauthorized", { status: 401 });
     }
 
     const user = await prisma.user.findUnique({
-      where: { email: session.user?.email || undefined },
+      where: { id: session.user.id },
       select: {
         name: true,
         email: true,
@@ -39,14 +39,14 @@ export async function PATCH(request: Request) {
   try {
     const session = await getServerSession(authOptions);
 
-    if (!session) {
+    if (!session || !session.user?.id) {
       return new Response("Unauthorized", { status: 401 });
     }
 
     const body = await request.json();
 
     const user = await prisma.user.findUnique({
-      where: { email: session.user?.email || undefined },
+      where: { id: session.user.id },
     });
 
     if (!user) {
@@ -54,7 +54,7 @@ export async function PATCH(request: Request) {
     }
 
     const updatedUser = await prisma.user.update({
-      where: { email: session.user?.email || undefined },
+      where: { id: session.user.id },
       data: {
         name: body.name,
         phone: body.phone,