Supabase auth token not being consumed and redirected

Help
,
1

I’m using the built in authentication with supabase (similar to firebase) and I’m having an issue with how the links sent via email (EX: Confirm your account or password recovery) are working. I’m wondering if it is related to some changes in DNS settings. What is being sent:

{{ .SiteURL }}/api/auth/confirm?token_hash={{ .TokenHash }}&type=recovery&next=/settings/account#password"

**note the site URL and token both appear as expected, just using these as placeholders.

Right now the link brings me directly to:
{{ .SiteURL }}/api/auth/confirm?token_hash={{ .TokenHash }}&type=recovery&next=%2Fsettings%2Faccount%2F

Which is obviously not a valid URL. Where it should be redirecting after clicking the link is:
{{ .SiteURL }}/settings/account after it consumes the Auth token.

This was functional before I updated some DNS settings, but I can’t figure out what changed. I am also looking into auth with supabase related issues, but thought I would ask here also. The one thing that I can think of might affect this is the fact that the website is at app.{companyName}.com instead of just {companyName}.com.

Everything else related to DNS settings are functioning as expected, I’ve tested redirects and other routing things and all behaviour works correctly. When I navigate directly to {{ .SiteURL }}/settings/account in the address bar, that behaves as expected (IE redirects to sign in since there is no auth token).

Additionally, these links work locally and it is only in production that they are broken.

2

Hi, @dev-combinesetti! Welcome to the Vercel Community :smile:

Thanks for being patient with us :pray:

Are you still seeing issues here?

If so, some things to try:

  • Can you check if the email templates are correctly URL encoding the parameters?
  • Since you mentioned that your website is at app.{companyName}.com, make sure that your DNS settings and Supabase configuration align with this subdomain setup.
  • Make sure that your DNS CNAME record for app.{companyName}.com is correctly set up.
  • In your Supabase project settings, under Authentication > URL Configuration, make sure the Site URL is set to https://app.{companyName}.com.
  • If you’re using a custom SMTP server for sending emails, ensure it’s correctly configured in Supabase.

Let us know how you get on!

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.