Skip to content

Pull requests: supabase/auth

New pull request New
115 Open 1,695 Closed
115 Open 1,695 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Fix expired SIWE message acceptance without Not Before
#2698 opened Aug 14, 2026 by depthfirst-app Bot Loading…
ci: detect more than one unformatted file in the gofmt check
#2695 opened Aug 11, 2026 by thanderoy Loading…
fix: mitigate timing-based user enumeration in password grant
#2693 opened Aug 10, 2026 by Mahaveer1013 Loading…
4 tasks done
1
fix(phone): set phone_verified when a phone number is confirmed
#2690 opened Aug 9, 2026 by kanakkholwal Loading…
1
2
feat: pass opaque caller data to auth hooks
#2689 opened Aug 9, 2026 by ddurham2 Loading…
6
fix(web3): enforce SIWE Expiration Time without Not Before
#2688 opened Aug 8, 2026 by SashaMIT Loading…
2 tasks done
fix(web3): always bind SIWE/SIWS Domain to URI host
#2687 opened Aug 8, 2026 by SashaMIT Loading…
1 of 3 tasks
fix: handle concurrent OTP signup email unique race
#2686 opened Aug 7, 2026 by rohanpatel2002 Contributor Loading…
1
feat: add bird_verify SMS OTP provider
#2685 opened Aug 7, 2026 by cxbitz Loading…
fix: route the Messagebird provider to Bird API for bk_ keys
#2684 opened Aug 7, 2026 by cxbitz Loading…
1
chore(master): release 2.196.0 autorelease: pending
#2681 opened Aug 6, 2026 by supabase-releaser Bot Loading…
10
fix: persist user ID across before-user-created hook for external providers (#41309)
#2680 opened Aug 6, 2026 by abhinavlevi Loading…
1
chore: introduce typed context keys
#2677 opened Aug 4, 2026 by xlgmokha Contributor Loading…
@xlgmokha
1
chore: Use constants for all errors
#2676 opened Aug 4, 2026 by TobCar Loading…
1
feat(scim): serve the User ResourceType and Schema
#2672 opened Aug 4, 2026 by xlgmokha Contributor • 8/8 • Draft
@xlgmokha
feat(scim): add GET /scim/v2/Users/{id}
#2671 opened Aug 3, 2026 by xlgmokha Contributor • 7/8 Loading…
@xlgmokha
2
feat(scim): store a per-provider SCIM token
#2670 opened Aug 3, 2026 by xlgmokha Contributor • 6/8 Loading…
@xlgmokha
3
fix(oauth): reject plain PKCE method per OAuth 2.1 spec
#2669 opened Aug 2, 2026 by georgelzrc Loading…
feat(admin): add exact email user lookup support
#2668 opened Aug 2, 2026 by Dhruv302006 Loading…
1
test: cover empty API external URL validation
#2667 opened Aug 1, 2026 by Divyansh200102 Loading…
fix: guard against nil session in UserUpdate
#2666 opened Aug 1, 2026 by ridwanakf Loading…
1
fix: return RFC 6749 errors from the /oauth/token refresh grant
#2660 opened Jul 30, 2026 by nishant-iyengar Loading…
5
fix: only trigger after-user-created hook on account creation
#2656 opened Jul 30, 2026 by swithek Loading…
1
fix: unblock openapi code generation
#2653 opened Jul 28, 2026 by tsand Loading…
feat: otp token hash with salt
#2650 opened Jul 27, 2026 by staaldraad Member Loading…
1
ProTip! Type g i on any issue or pull request to go back to the issue listing page.