getting unauthorized in production but locally works flawless

  const res = await fetch(`${API_URL}/v1/auth/upload`, {
        method: "POST",
        credentials: "include",
        body: formData,
    });

import { Hono } from 'hono'
import { auth } from './lib/auth'
import { cors } from 'hono/cors'
import { config } from 'dotenv'
import routes from './routes'
config({ path: '.env' })

const app = new Hono()

app.use(
  '*',
  cors({
    origin: [process.env.CLIENT_URL!, process.env.BETTER_AUTH_URL!], // Specify allowed origins
    credentials: true, // Allow credentials (cookies, etc.)
    allowMethods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
    exposeHeaders: ["Content-Length"],
    allowHeaders: ["Content-Type", "Authorization", "Cookie"],
    maxAge: 600, // Cache preflight for 10 minutes
  })
)

app.all('/api/auth/*', async (c) => {
  return await auth.handler(c.req.raw)
})

app.get('/', (c) => {
  return c.json({
    message: 'Root route'
  })
})

app.route("/v1", routes)


export default {
  port: 8080,
  fetch: app.fetch,
}

import { Hono } from "hono";
import { auth } from "../lib/auth";
import { AuthSession } from "../lib/auth-types";
import { createClient } from "@supabase/supabase-js";

const uploadRoute = new Hono<AuthSession>();

const supabase = createClient(
  process.env.SUPABASE_URL!,
  process.env.SUPABASE_ANON_KEY!
);

uploadRoute.post("/upload", async (c) => {
  const session = await auth.api.getSession(c.req.raw);
  const user = session?.user;

  if (!user) {
    return c.json(null, 401);
  }

  const formData = await c.req.formData();
  const files = formData.getAll("files");

  if (!files || files.length === 0) {
    return c.json(
      {
        message: "No files uploaded",
      },
      400
    );
  }

  // later REPLACE with a title, user id, etc*.
  const randomFolderName = Math.random().toString(36).substring(2, 15);

  try {
    await Promise.all(
      files.map(async (file) => {
        const { error } = await supabase.storage
          .from("upload_files_bucket")
          .upload(
            `${randomFolderName}/${file instanceof File ? file.name : "unknown"}`,
            file as File,
            {
              cacheControl: "3600",
              upsert: false,
            }
          );
        if (error) {
          throw new Error("An supabase error occurred while uploading the file");
        }
      })
    );

    return c.json({
      message: "Files uploaded",
    }, 200);
  } catch (error) {
    return c.json({
      message: "Error uploading files",
    }, 500);
  }
});


export default uploadRoute;