Fix Instagram OAuth and connected feed sync

[Dev-Sahad]

What changed

• separates the Facebook Login App ID from Instagram Login credentials
• removes the invalid fallback that sent a Facebook App ID to Instagram OAuth
• adds protected Instagram OAuth initiation/callback routes with state validation
• syncs the connected Instagram professional account, posts, carousels, and Reels through the permissioned API
• persists public media metadata and private OAuth connection data in RLS-protected Supabase tables
• renders connected Instagram media on the portfolio and improves the admin setup guidance

Root cause

The Instagram authorization request used the Facebook Login app ID when INSTAGRAM_CLIENT_ID was absent. Instagram rejected that ID because the Meta app only had the Facebook Login use case and was not configured as an Instagram platform app.

Validation

• npm run lint -- --quiet
• npx tsc --noEmit
• npm run build
• live Supabase migration and RLS verification

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
portfolio	Building	Preview	Aug 1, 2026 11:09am