Search results

Mix-Up Attacks Defense via Distinct Redirect URIs

Status: Open.

#2474 In supabase/auth;

· ylemkimon opened on Apr 10, 2026

Issue with automatic identity linking

bugSomething isn't workingSomething isn't working

Status: Open.

#2472 In supabase/auth;

· knolf-twinconsult opened on Apr 9, 2026

Go lang variables such as {{.SiteUrl}} not being gobally exposed to all email templates

bugSomething isn't workingSomething isn't working

Status: Open.

#2468 In supabase/auth;

· vonschappler opened on Apr 7, 2026

OTP signup fails with 422 when minimum_password_length is high

Status: Open.

#2456 In supabase/auth;

· Magnuti opened on Mar 30, 2026

SIWE ExpirationTime check skipped when NotBefore is absent

Status: Open.

#2453 In supabase/auth;

· oniani1 opened on Mar 28, 2026

Redirect URLs using Google OAuth don't work if containing underscores.

bugSomething isn't workingSomething isn't working

Status: Open.

#2447 In supabase/auth;

· TDuffinNTU opened on Mar 25, 2026

Notion OAuth provider returns 403 when retrieving user profile (GoTrue v2.188.1)

bugSomething isn't workingSomething isn't working

Status: Open.

#2437 In supabase/auth;

· matheobz opened on Mar 20, 2026

Verifying a previously uncompleted phone may link to incorrect user ID

bugSomething isn't workingSomething isn't working

Status: Open.

#2430 In supabase/auth;

· kostasb opened on Mar 18, 2026

prepPKCERedirectURLdrops // from custom scheme URIs, corrupting PKCE auth code on iOS (%23)

bugSomething isn't workingSomething isn't working

Status: Open.

#2423 In supabase/auth;

· rintaro-okahara opened on Mar 13, 2026

OAuth 2.1 authorize redirects to invalid /oauth/consent path on hosted projects

bugSomething isn't workingSomething isn't working

Status: Open.

#2408 In supabase/auth;

· fcolavecchia opened on Mar 7, 2026

Vulnerability in auth project

bugSomething isn't workingSomething isn't working

Status: Open.

#2384 In supabase/auth;

· ankitdn opened on Feb 19, 2026

Apple provider: nonce verification always fails ("Nonces mismatch") — hex vs base64url encoding

bugSomething isn't workingSomething isn't working

Status: Open.

#2378 In supabase/auth;

· qocotomi opened on Feb 17, 2026