-
Notifications
You must be signed in to change notification settings - Fork 748
Pull requests: supabase/auth
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
feat(auth): support distinct redirect URIs for OAuth mix-up defense (…
#2782
opened Sep 3, 2026 by
guptamilind0099
Loading…
chore(otp): clamp
OtpExp to the max safe duration
#2781
opened Sep 2, 2026 by
annabkr
Contributor
Loading…
fix(passkey): resolve Backup Eligible flag inconsistency on login (#2…
#2779
opened Sep 2, 2026 by
guptamilind0099
Loading…
chore: add support for verbose flag to the migration tool to view successful migrations
#2769
opened Sep 1, 2026 by
annabkr
Contributor
Loading…
feat(otp): write
expires_at when creating one_time_tokens
#2766
opened Aug 31, 2026 by
annabkr
Contributor
•
2/2
Loading…
feat(mfa): support test OTPs for phone mfa
#2761
opened Aug 28, 2026 by
singh-inder
Contributor
Loading…
fix(external): only fire after-user-created hook on account creation
#2756
opened Aug 28, 2026 by
Mpradeep-dev
Loading…
chore(master): release 2.197.0
autorelease: pending
#2755
opened Aug 27, 2026 by
supabase-releaser
Bot
Loading…
fix: sign SAML AuthnRequest with rsa-sha256
#2750
opened Aug 26, 2026 by
xlgmokha
Contributor
Loading…
fix: prevent account enumeration on recover endpoint for invalid emai…
#2723
opened Aug 22, 2026 by
guptamilind0099
Loading…
fix(verify): prefer session user for phone_change verification (fixes #2430)
#2718
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(otp): dummy signup password must satisfy minimum_password_length (fixes #2456)
#2717
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(admin): generateLink email_change_new hashed_token must match stored token (fixes #2538)
#2716
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(hooks): send_email payload site_url should use GOTRUE_SITE_URL (fixes #2558)
#2715
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(identity): update last_sign_in_at on subsequent external sign-ins (fixes #2563)
#2714
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(external): use email_address_not_provided instead of 500 when provider omits email (fixes #2583)
#2713
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(signup): return 409 instead of raw 500 on concurrent signup race (fixes #2675)
#2712
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(verify): honor double-confirm email change when mailer_autoconfirm is enabled (fixes #2600)
#2711
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(api): do not leak account existence on recover for reserved domains (fixes #2702)
#2710
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(api): fail closed when session is nil during user update (fixes #2665)
#2709
opened Aug 18, 2026 by
deepshekhardas
Loading…
feat(oauth): allow syncing of email address changes from oauth providers
#2706
opened Aug 18, 2026 by
ftyl
Loading…
Previous Next
ProTip!
Type g i on any issue or pull request to go back to the issue listing page.