Update routes/subscription.py

routes/subscription.py

@@ -55,6 +55,17 @@ def verify_token(user_token: str) -> str:
     """
     Valida o token JWT no Supabase e retorna o user_id se for válido.
     """
+    if not user_token or len(user_token.split('.')) != 3:
+        raise HTTPException(status_code=400, detail="Invalid JWT token format")
+    
+    # Verificando o JWT
+    try:
+        jwt.decode(user_token, options={"verify_signature": False})  # Decodifica sem validar a assinatura, apenas para verificar o formato
+    except jwt.ExpiredSignatureError:
+        raise HTTPException(status_code=401, detail="Token expired")
+    except jwt.DecodeError:
+        raise HTTPException(status_code=401, detail="Invalid JWT token")
+    
     headers = {
         "Authorization": f"Bearer {user_token}",
         "apikey": SUPABASE_KEY,