[Unresolved as of 3/28]: Login & Reset Password Issues

[voltihost]

Hi all,

Login issue
My hosted instance was working properly but all of the sudden, when a user logs in and clicks Login, it now just refreshes the page. Checked console and runtime logs, I don't see anything out of the ordinary. Tried redeploying the app but issue still persists.

Reset password
This feature hasn't worked properly for me; the Site URL in Supabase is updated and when a user clicks on the link in the email it redirects to {site_url}/#access-token... but it's a blank page.

Any thoughts?

Unresolved: As of March 28 still having both issues above.

[voltihost]

I do get this in the runtime log for the reset password issue:

[voltihost]

Maybe this recent change led to problems.

supabase/config.toml

Should site_url = "http://localhost:3000" and additional_redirect_urls = ["https://localhost:3000"] be changed to the installed url, or left alone?

[voltihost]

It seems as this is only relevant when pushing db to Supabase hosted. Which was done at the beginning, and the app functioned correctly.

[voltihost]

Investigating the Infrastructure > Auth logs in Supabase:

• Request started, Request completed, and Login event was registered without error.

Seems that something is causing the url to redirect to /login instead of getting into the app.

[spammenotinoz]

I did another 4 front-end deployment last night, just testing performance opimisation, so I don't think the issue is with any front-end code.

You said you validated the SITE URL is correct, double-check it is the full public URL , eg: https://chatbotui.com for McKay's hosted version as an example.
But also check below under URL hooks that the front-end address is listed. Note: Wildcards can also be used here.
If the front-end domain isn't listed here, then re-directs for authentication won't work.

[voltihost]

Thank you for taking the time to respond.

This is on the hosted Supabase database side, correct?

Authentication > URL Configuration
Site URL is correctly set to https://domain.extension

Underneath that, for Redirect URLs, I have:
https://domain.extension
https://domain.extension/*

[spammenotinoz]

If your connect to your front end via https://domain.extension then the below is correct.

For re-direct you just need
https://domain.extension

Wildcard is only required if you have front-end is like https://chat.domain.extension
Then in re-direct you can put. I suppose this comes in handy if you have multiple front-ends and don't want to list them all.
https://*.domain.extension

[voltihost]

I see, thank you again.

Any other thoughts on why the app all of the sudden would not work?

The only other thing I can think of is a user tried to authenticate but failed because their password did not meet the Supabase-defined requirements, but i have since changed the password to be compliant. Shortly after that, the app stopped working for all users. I also switched back to have a lesser password strength requirement for all users.

[voltihost]

I also see a new error in my frontend console:

Failed to load resource: the server responded with a status of 406 ()
{"message":"No API key found in request","hint":"No apikey request header or url param was found."}

[ScrogBot]

I have been getting the same error for password resets.

[spammenotinoz]

For password resets, tested on my end and it wasn't working.
But mine is working now, could be a fluke but this is what I did.
Get your project URL, under API, should look like https://referenceid.supabase.co
Add that to the redirect URLs under authentication -> URL configuration

Edit: It is now consistently working for me

[voltihost]

I get redirected to https://domain.com/auth/callback?code={UNIQUE-CODE}&next=%2Flogin%2Fpassword but it is a blank page for me. Any thoughts?

[voltihost]

On the login issue:

• It seems to happen when there are more than 2 users, one user has 2 workspaces.
• When the 2nd user tries to login, this 406 starts occurring for both users & everyone else that follows.
  

[Virtual-Educator]

I have https://domain.extension/auth/callback in my URL redirects and password resets are working for me.

Per Login page.tsx
const { error } = await supabase.auth.resetPasswordForEmail(email, {
redirectTo: ${origin}/auth/callback?next=/login/password