Skip to content

Pull requests: supabase/auth

New pull request New
120 Open 1,695 Closed
120 Open 1,695 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix(oauth): allow ephemeral loopback redirect ports
#2705 opened Aug 17, 2026 by qtjg Loading…
fix: validate SAML metadata before updating it in the login flow
#2704 opened Aug 17, 2026 by cstockton Contributor Loading…
4
fix(verify): resolve phone change by one-time token, not phone alone
#2701 opened Aug 16, 2026 by hamodywe Loading…
1
2
feat(api): allow signup without creating a session (#2586)
#2700 opened Aug 15, 2026 by YadneshTeli Loading…
1
fix(identity): link an email-optional identity to a phone-only user
#2699 opened Aug 14, 2026 by hamodywe Loading…
1
Fix expired SIWE message acceptance without Not Before
#2698 opened Aug 14, 2026 by depthfirst-app Bot Loading…
ci: detect more than one unformatted file in the gofmt check
#2695 opened Aug 11, 2026 by thanderoy Loading…
fix: mitigate timing-based user enumeration in password grant
#2693 opened Aug 10, 2026 by Mahaveer1013 Loading…
4 tasks done
1
fix(phone): set phone_verified when a phone number is confirmed
#2690 opened Aug 9, 2026 by kanakkholwal Loading…
1
2
feat: pass opaque caller data to auth hooks
#2689 opened Aug 9, 2026 by ddurham2 Loading…
6
fix(web3): enforce SIWE Expiration Time without Not Before
#2688 opened Aug 8, 2026 by SashaMIT Loading…
2 tasks done
fix(web3): always bind SIWE/SIWS Domain to URI host
#2687 opened Aug 8, 2026 by SashaMIT Loading…
1 of 3 tasks
fix: handle concurrent OTP signup email unique race
#2686 opened Aug 7, 2026 by rohanpatel2002 Contributor Loading…
1
feat: add bird_verify SMS OTP provider
#2685 opened Aug 7, 2026 by cxbitz Loading…
fix: route the Messagebird provider to Bird API for bk_ keys
#2684 opened Aug 7, 2026 by cxbitz Loading…
1
chore(master): release 2.196.0 autorelease: pending
#2681 opened Aug 6, 2026 by supabase-releaser Bot Loading…
10
fix: persist user ID across before-user-created hook for external providers (#41309)
#2680 opened Aug 6, 2026 by abhinavlevi Loading…
1
chore: introduce typed context keys
#2677 opened Aug 4, 2026 by xlgmokha Contributor Loading…
@xlgmokha
1
chore: Use constants for all errors
#2676 opened Aug 4, 2026 by TobCar Loading…
1
feat(scim): serve the User ResourceType and Schema
#2672 opened Aug 4, 2026 by xlgmokha Contributor • 8/8 • Draft
@xlgmokha
feat(scim): add GET /scim/v2/Users/{id}
#2671 opened Aug 3, 2026 by xlgmokha Contributor • 7/8 Loading…
@xlgmokha
2
feat(scim): store a per-provider SCIM token
#2670 opened Aug 3, 2026 by xlgmokha Contributor • 6/8 Loading…
@xlgmokha
3
fix(oauth): reject plain PKCE method per OAuth 2.1 spec
#2669 opened Aug 2, 2026 by georgelzrc Loading…
feat(admin): add exact email user lookup support
#2668 opened Aug 2, 2026 by Dhruv302006 Loading…
1
test: cover empty API external URL validation
#2667 opened Aug 1, 2026 by Divyansh200102 Loading…
ProTip! Adding no:label will show everything without a label.