First of all I would like to say that your published articles are great.
I am implementing a very similar solution to your example. The problem is that when I use 'authenticated' :
REVOKE EXECUTE ON FUNCTION verify_user_password of anon, authenticated;
it denies me access when I call it from the Edge function.
If I just revoke "anon" it works.
How do you get it to work if you also revoke "authenticated"?