-
Notifications
You must be signed in to change notification settings - Fork 746
Pull requests: supabase/auth
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: prevent account enumeration on recover endpoint for invalid emai…
#2723
opened Aug 22, 2026 by
guptamilind0099
Loading…
chore: backfill missing JSON builder tests
#2721
opened Aug 20, 2026 by
xlgmokha
Contributor
Loading…
fix(verify): prefer session user for phone_change verification (fixes #2430)
#2718
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(otp): dummy signup password must satisfy minimum_password_length (fixes #2456)
#2717
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(admin): generateLink email_change_new hashed_token must match stored token (fixes #2538)
#2716
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(hooks): send_email payload site_url should use GOTRUE_SITE_URL (fixes #2558)
#2715
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(identity): update last_sign_in_at on subsequent external sign-ins (fixes #2563)
#2714
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(external): use email_address_not_provided instead of 500 when provider omits email (fixes #2583)
#2713
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(signup): return 409 instead of raw 500 on concurrent signup race (fixes #2675)
#2712
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(verify): honor double-confirm email change when mailer_autoconfirm is enabled (fixes #2600)
#2711
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(api): do not leak account existence on recover for reserved domains (fixes #2702)
#2710
opened Aug 18, 2026 by
deepshekhardas
Loading…
fix(api): fail closed when session is nil during user update (fixes #2665)
#2709
opened Aug 18, 2026 by
deepshekhardas
Loading…
feat(oauth): allow syncing of email address changes from oauth providers
#2706
opened Aug 18, 2026 by
ftyl
Loading…
fix: validate SAML metadata before updating it in the login flow
#2704
opened Aug 17, 2026 by
cstockton
Contributor
Loading…
fix(verify): resolve phone change by one-time token, not phone alone
#2701
opened Aug 16, 2026 by
hamodywe
Loading…
feat(api): allow signup without creating a session (#2586)
#2700
opened Aug 15, 2026 by
YadneshTeli
Loading…
fix(identity): link an email-optional identity to a phone-only user
#2699
opened Aug 14, 2026 by
hamodywe
Loading…
Fix expired SIWE message acceptance without Not Before
#2698
opened Aug 14, 2026 by
depthfirst-app
Bot
Loading…
ci: detect more than one unformatted file in the gofmt check
#2695
opened Aug 11, 2026 by
thanderoy
Loading…
fix: mitigate timing-based user enumeration in password grant
#2693
opened Aug 10, 2026 by
Mahaveer1013
Loading…
4 tasks done
fix(phone): set phone_verified when a phone number is confirmed
#2690
opened Aug 9, 2026 by
kanakkholwal
Loading…
fix(web3): enforce SIWE Expiration Time without Not Before
#2688
opened Aug 8, 2026 by
SashaMIT
Loading…
2 tasks done
Previous Next
ProTip!
What’s not been updated in a month: updated:<2026-07-23.