Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: set cookies for password recovery event #32

Merged

Conversation

j4w8n
Copy link
Contributor

@j4w8n j4w8n commented Jul 3, 2024

What kind of change does this PR introduce?

Bug fix

What is the current behavior?

When resetting a user's password with an email template which has a URL defining the type value as recovery, and using the verifyOtp method to process the token_hash and type, the SSR server client's onAuthStateChange function does not recognize the PASSWORD_RECOVERY event that verifyOtp fires. This prevents the code here from running; resulting in the new session not being saved to cookies, and the user is not considered logged in.

Fixes #21

What is the new behavior?

User is logged in.

Additional context

Replaces PR #24

@J0 J0 force-pushed the fix-set-cookies-for-password-recovery-event branch from 7501201 to d2d71c8 Compare July 3, 2024 18:40
@J0 J0 marked this pull request as draft July 3, 2024 18:41
@J0 J0 marked this pull request as ready for review July 3, 2024 18:41
@J0 J0 merged commit 7dc1837 into supabase:main Jul 3, 2024
3 checks passed
@J0
Copy link
Contributor

J0 commented Jul 3, 2024

Thank you!

hf pushed a commit that referenced this pull request Aug 19, 2024
🤖 I have created a release *beep* *boop*
---


## [0.5.0](v0.4.0...v0.5.0)
(2024-08-19)


### Features

* update CI so it runs on release as well
([#33](#33))
([4517996](4517996))


### Bug Fixes

* re-apply update CI so it runs on release as well
([#49](#49))
([51d5a43](51d5a43))
* revert "update CI so it runs on release as well"
([#44](#44))
([9d0e859](9d0e859))
* set cookies for password recovery event
([#32](#32))
([7dc1837](7dc1837))
* set cookies when mfa challenge is verified
([#27](#27))
([c217f53](c217f53))
* update conventional commits ci to use main instead of master
([#31](#31))
([bebce89](bebce89))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Password Recovery Does Not Update Auth Session
3 participants